MIME and PHP?

[maeriyeth]

Well. Hopefully this is the right forum to mention this in. But the past couple days someone has been creating accounts on my website with what I recognize as MIME mail header code in various spots (email, password, nickname, etc.) You know ... Content-Type: multipart and border: 53aa442251g2251, etc. Of course, it was cut off after the border due to restrictions in the size.

I was wondering if anyone might know the motive behind this or if it might be harmful to the game or what? If so, what might be the most effective way to keep this from happening? I've currently closed registrations until I can figure out whether this person is doing this to annoy me or what.

[hitman6003]

That is someone attempting to use your email system for malacious purposes.

Do some research on email header injections and things of that nature:

[a href=\"http://www.nyphp.org/phundamentals/email_header_injection.php\" target=\"_blank\"]http://www.nyphp.org/phundamentals/email_h...r_injection.php[/a]

Google "php email header injection" (minus quotes) and things of that nature.

[maeriyeth]

[!--quoteo(post=359516:date=Mar 28 2006, 09:15 PM:name=hitman6003)--][div class=\'quotetop\']QUOTE(hitman6003 @ Mar 28 2006, 09:15 PM) [snapback]359516[/snapback][/div][div class=\'quotemain\'][!--quotec--]
That is someone attempting to use your email system for malacious purposes.

Do some research on email header injections and things of that nature:

[a href=\"http://www.nyphp.org/phundamentals/email_header_injection.php\" target=\"_blank\"]http://www.nyphp.org/phundamentals/email_h...r_injection.php[/a]

Google "php email header injection" (minus quotes) and things of that nature.
[/quote]


Many thanks for the quick reply - I'll take a better look into it and see what I can do. :)