It's a potential problem, but far from the only one. The tweaks by codeexploiter still don't address the most grievous error: injection. Malformed user input, whether it be intentional or not, can cause the code to fail or to become a tool for sending spam.Originally Posted by chechu
Either use a third-party to handle sending mail, or use a well-established library to validate and process input. The current code should be scrapped.
Mike



Reply With Quote

Bookmarks