6

ismailinjected

is_mail_injected
SYNOPSIS

is_mail_injected($mail)

DESCRIPTION

is_mail_injected returns true if the string $s contains characters or escape sequences that may be used for email header injection.

EXAMPLE
php > require 'library/ismailinjected.php';
php > var_dump(is_mail_injected("user@example.com\r\nBcc: hacker@example.com"));
bool(true)
php > var_dump(is_mail_injected("user@example.com"));
bool(false)
CODE
  1. function is_mail_injected($s) {
  2.     return preg_match('/[\r\n\t]|%0a|%0d|%08|%09/i', $s) == 1;
  3. }
SEE ALSO

ismailallowed, protectmail

Comments

Your comment:
[p] [b] [i] [u] [s] [quote] [pre] [br] [code] [url] [email] strip help 2000

Enter a maximum of 2000 characters.
Improve the presentation of your text with the following formatting tags:
[p]paragraph[/p], [b]bold[/b], [i]italics[/i], [u]underline[/u], [s]strike[/s], [quote]citation[/quote], [pre]as is[/pre], [br]line break,
[url]http://www.izend.org[/url], [url=http://www.izend.org]site[/url], [email]izend@izend.org[/email], [email=izend@izend.org]izend[/email],
[code]command[/code], [code=language]source code in c, java, php, html, javascript, xml, css, sql, bash, dos, make, etc.[/code].