6
ismailinjected
is_mail_injected
SYNOPSIS
is_mail_injected($mail)
DESCRIPTION
is_mail_injected returns true if the string $s contains characters or escape sequences that may be used for email header injection.
EXAMPLE
php > require 'library/ismailinjected.php';
php > var_dump(is_mail_injected("user@example.com\r\nBcc: hacker@example.com"));
bool(true)
php > var_dump(is_mail_injected("user@example.com"));
bool(false)
CODE
- function is_mail_injected($s) {
- return preg_match('/[\r\n\t]|%0a|%0d|%08|%09/i', $s) == 1;
- }
Comments