NYCPHP Meetup

NYPHP.org

[nycphp-talk] Phundamentals Title Change: Email Header Injection

Chris Shiflett shiflett at php.net
Sat Sep 24 00:17:32 EDT 2005


David Mintz wrote:
> The only conceivable drawback is that if user input is destined to
> become the message body -- a textarea for the user to type a
> message -- and for some reason the user legitimately wants to say
> something like "Have you guys heard about the Content-type:
> attack?" Granted, it's unusual

It just happened. :-)

Chris

-- 
Chris Shiflett
Brain Bulb, The PHP Consultancy
http://brainbulb.com/



More information about the talk mailing list