On Tue, November 7, 2006 4:22 pm, Bruce Cowin wrote: > Yikes, so besides disabling the mail() function, how do you check for > all that? if (strstr($subject, "\n") || strstr($subject, "\r")) die("Spammer"); Same thing again for "$from" or any other variable going into your headers. In the body, there's less risk, which is good, as there's almost no way to validate what is or isn't junk body. -- Some people have a "gift" link here. Know what I want? I want you to buy a CD from some starving artist. http://cdbaby.com/browse/from/lynch Yeah, I get a buck. So? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php