RE: would this work 08-11-2014, 04:20 AM
#4
You may want to sanitize user inputs. As it stands, a person could send to multiple emails at once ($to="a@Gmail.com, b@Gmail.com, c@Gmail.com, ...ect"
. This could possibly be exploited to send out tons of spam. They can also pass additional headers by setting the $from variable to something like this "myaccount@Gmail.com\r\nReply-To: youraccount@Gmail.com".
. This could possibly be exploited to send out tons of spam. They can also pass additional headers by setting the $from variable to something like this "myaccount@Gmail.com\r\nReply-To: youraccount@Gmail.com".
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
