Re: Injection in mail()

moosus wrote:
G'day Guys,

Do I need to worry about cleaning my $_POST[comments] field before using it
in a mail() function?

Cheers
moosus


Depends on how you use mail(). If you have 'clean' to- and subject-fields (and headers-field), it is relatively safe to use uncleaned body-field.

Ofcourse if you want to send valid emails, you should make sure that lines aren't too long and your character set is correctly setup and converted into the email etc.

- cheers,
Olivia

--
-- Olivia Pahnanpohja
Posmo Ltd
http://posmo.peoplegroup.fi
.