2
votes
1answer
642 views

Hosted Email Hacked, SQL injection maybe?

I have a hosted website using a free hosting service, I received an email this afternoon saying that I have been suspended because my account has been compromised. Basically, someone is using my ...
0
votes
2answers
609 views

How to encode letters in multipart/form-data to include CR/LF characters?

Part of HTTP request that should be sent to server with Content-Type: multipart/form-data; looks like: ------WebKitFormBoundaryQ7KGYev31biaJTW8 Content-Disposition: form-data; name="subject" ...
2
votes
1answer
600 views

Advice if safe from mail header injection PHP [duplicate]

Possible Duplicate: PHP mail() Header Injection Prevention Since I only started learning about header injection in the PHP mail() function, am uncertain if the form/code below is vulnerable ...
6
votes
3answers
1k views

PHP mail() Header Injection Prevention

This site nicely explains the problem. Essentially, nearly all php mail() examples that are given are vulnerable to header injection attacks. The referenced site gives a regex sanitation solution ...