Email Injection attacks

I wonder if it is enough to scan the message body for
and replace them?

-- Long
http://MeandmyCity.com/ - Free, searchable business directory for local communities
http://edgesoft.ca/blog/read/2 - No-Cookie Session Support plugin for Rails

not just the message body. you'd have to scan the headers (to, from,
subject) for anything that should'nt be there or not in the correct
format.

see

http://www.securephpwiki.com/index.php/Email_Injection

for a list of example scenarios.

I agree. Each form field should be scanned.

-- Long

Chris Hall wrote: