PHP——防止Emain注入

来源：互联网发布：免费热敏打印软件编辑：程序博客网时间：2024/06/05 03:11

防止 e-mail 注入的最好方法就是对输入进行验证。

<html><body><?phpfunction spamcheck($field)  {  //filter_var() 清理电子邮件  //address using FILTER_SANITIZE_EMAIL 从字符串中删除电子邮件的非法字符  $field=filter_var($field, FILTER_SANITIZE_EMAIL);    //filter_var() 电子邮件验证  //address using FILTER_VALIDATE_EMAIL   验证电子邮件地址  if(filter_var($field, FILTER_VALIDATE_EMAIL))    {    return TRUE;    }  else    {    return FALSE;    }  }if (isset($_REQUEST['email']))  {  $mailcheck = spamcheck($_REQUEST['email']);  if ($mailcheck==FALSE)    {    echo "Invalid input";    }  else    {//send email    $email = $_REQUEST['email'] ;     $subject = $_REQUEST['subject'] ;    $message = $_REQUEST['message'] ;    mail("someone@example.com", "Subject: $subject",    $message, "From: $email" );    echo "Thank you for using our mail form";    }  }else  {  echo "<form method='post' action='mailform.php'>  Email: <input name='email' type='text' /><br />  Subject: <input name='subject' type='text' /><br />  Message:<br />  <textarea name='message' rows='15' cols='40'>  </textarea><br />  <input type='submit' />  </form>";  }?></body></html>

0 0