Login Register


would this work filter_list
Author
Message
would this work #1
I'm trying to make a url based email bomber like an api and i'm not sure if this would work


PHP Code:
<?php $num = 1; $email =$_GET['email']; $spam =$_GET['spam']; $subject =$_GET['subject']; $message =$_GET['message']; $from =$_GET['from']; $send =$_GET['send']; if($spam!='' && $email=='') { die('Please enter an email'); } if(51<=$spam) { die('Error: Number to spam to large. Max is 50 (for security reasons)'); } if($email != '') { while($num<=$spam) { mail ($email, $subject, $message, "From: " . $from); echo $num . "<br>"; $num++; } } ?>
[Image: addskype.png?u=space.bukkit]

Reply

RE: would this work #2
To a certain extent, yes. Though you might want to ensure that PHP's mail function is allowed by your host. Also, isset helps.
[Image: BXqGARG.png]

Reply

RE: would this work #3
(08-11-2014, 12:44 AM)Equinox Wrote: To a certain extent, yes. Though you might want to ensure that PHP's mail function is allowed by your host. Also, isset helps.

kk thanks
[Image: addskype.png?u=space.bukkit]

Reply

RE: would this work #4
You may want to sanitize user inputs. As it stands, a person could send to multiple emails at once ($to="a@Gmail.com, b@Gmail.com, c@Gmail.com, ...ect"Wink. This could possibly be exploited to send out tons of spam. They can also pass additional headers by setting the $from variable to something like this "myaccount@Gmail.com\r\nReply-To: youraccount@Gmail.com".

Reply

RE: would this work #5
Another thing to note is that many shared hosts limit at the server level the number of emails one account can send per hour. This could be 50, or it could be 500.

Either way - large amounts of spam may trigger security measures both on the host as well as on the network. It's also very easy to get your host IP blacklisted on spam lists. If I were to do this I would look into using as many hosts as possible to send as little mail per host as possible. But that would be a much bigger project than what you have here.

Reply

RE: would this work #6
You're host would ban you, but the best way to find out is to try. Looking at the code, it looks like it's fine.

Reply

RE: would this work #7
mail() in some instances will call sendmail via a shell, invoking the recent bash vulnerability if your host hasn't updated.
Best to use several SMTP connections, possibly an array of them.
PGP
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47

Reply







Users browsing this thread: 1 Guest(s)