This is my experience: I have to rewrite administration page where
I thought: "no one had problem with no limitation in the past, why they
It happened I have a dashboard page where is listed the last entries
and links for update and delete its. It happened that few day later 20
entries was deleted and I was looking for what caused the problem for
I found this in a server:
$header = "From: <".$_REQUEST['email'].">\n"; #... mail($from,$subjet,$message,$header);
$_REQUEST['email'] came from a form input ...
Here $_REQUEST['email'] should be, at least, stripped by all \n no matter on how you trust to js code..
$from = $_REQUEST['email']; $from = str_replace("\n","",$from); $header = "From: <$from>\n";