PHP Mail Injection - Spam Attack - Powered By Kayako SupportSuite

reseller hosting, dedicated server, ahosting

05 Sep 2010

Support Center » Knowledgebase » PHP Mail Injection - Spam Attack

	PHP Mail Injection - Spam Attack

Solution Hello,

Spammers can use your php mail scripts and they can add their header, c.c. & b.c.c then send mail to especially aol mail address.
Please add following codes to your php mail scripts ;

It should be at top of page (php codes) - it works for POST method
$badStrings = array("Content-Type:",
"MIME-Version:",
"Content-Transfer-Encoding:",
"bcc:",
"cc:");
foreach($_POST as $k => $v){
foreach($badStrings as $v2){
if(strpos($v, $v2) !== false){
header("HTTP/1.0 403 Forbidden");
exit;
}
}
}
?>

Article Details

Article ID:

Created On:

07 Dec 2005 04:33 PM