preg_replace

[RON_ron]

Could someone help to prevent this PHP being inject.

 

<?PHP

$to = "[email protected]," $mail;

 

$subject = "$thecompany submission";

$headers = "From:" .$email."\r\n";

$message = "Name: " . $thename;

$message .= "\nCompany: " . $ecompany;

$message .= "\nAddress: " . $eaddress;

$message .= "\nRequired Date: " . $edate;

$message .= "\nPhone: " . $phone;

$message .= "\nEmail: " . $email;

$message .= "\n\nQuantities";

 

$sentOk = mail($to,$subject,$message,$headers);

 

echo "sentOk=" . $sentOk;

[kenrbnsn]

What do you mean?

 

Ken

[RON_ron]

I want to prevent any injections to my mail headers... That's my mail code and could you show me how how to write it?

[RON_ron]

someone please....

[salathe]

Do you know what you're wanting to protect against?

[RON_ron]

The issue is I have a mail fuction wheich sends the same mail to several email addresses. But since today morning few of them are not receiveing the email. I check all possible ways but was not successful. So I thought to try to avoid any injection (if there's any).

 

(I wonder why arn't they getting the same mail.)

 

 

[kenrbnsn]

Take a look at Email Header Injection Exploit. It was written in 2005, but the solution is still valid now.

 

Ken