Salut,

On Tue, Aug 15, 2006 at 11:39:15PM +0200, Steven Glogger wrote:
> for the php users i've found a solution where i patched tha mail() function
> to not allow linefeeds etc. in header and to: lines.
> i've documented it some time ago here:
> http://wiki.hidden.ch/index.php/PHP#Patch_von_mail.c_f.FCr_mail.28.29-funkti
> on

The good thing about PHP's builtin input sanitizing and security functions
is that they contain the majority of bugs. mail() is one of them. ;-)

                                Tonnerre

Attachment: pgprRBLPektlZ.pgp
Description: PGP signature

_______________________________________________
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Antwort per Email an