Re: PHP Mailto();

From	"J.O. Aho" <user@example.net>
Newsgroups	comp.lang.php
Subject	Re: PHP Mailto();
Date	2013-07-01 07:03 +0200
Message-ID	<b3cgt2FdieqU1@mid.individual.net> (permalink)
References	<kqqf0l$7gm$1@speranza.aioe.org>

Show all headers | View raw

On 01/07/13 01:29, Twayne wrote:
> Hi,
>
> Win 7, PHP 5.3.5, XAMPP local server, standard Unix remote server:
>
> having a problem with mailto. It's working fine, but ... I can't figure
> how to get it to contain all the information I want sent to me. I have
> the following:
> =========================
> $header = "From: abuse@hcs-classof64.net";
> $to = "abuse@hcs-classof64.net";
> $subject = "HCS Abuse Form";
> $header = "From: $name\r\n";

you forgot the . in front of the =, as now you replace the original From.

> $header .= "Reply-To: abuse@hcs-classof64.net\r\n";

No need of this, if you use the original From.

> $header .= "Return-Path: abuse@hcs-classof64.net\r\n";
>
> mail($to, $subject, $comments , $respond, $header);

you know that you are sending your headers to the "sendmail command", 
see www.php.net/manual/en/function.mail.php

mail($to, $subject, $comments, $header);

> ========================
>     And it seems to work fine. But what I'd like to add to the mailto is
> the following:
> =======================
> $browser = $_SERVER['HTTP_USER_AGENT'];
> $ipAddress = $_SERVER['REMOTE_ADDR'];
> =======================
>
> I've tried the Headers method, simply adding them inlilne. No Good.
> I've also tried "and"ing things together like " $comments . $respond "
> for instance, but then they all run together and it's difficult to spot
> the additional information since there are no line breaks.

If you want to add something to the header, then use
"X-something: data\r\n"

Don't use two "From:", use "X-Sender:" for the $name, don't forget to 
sanitize the user input or else you will end up with mail header 
injections.

$header .= "X-Sender: $name\r\n"; // needs sanitation
$header .= "X-UserAgent: $browser\r\n"; // needs sanitation
$header .= "X-IP: $ipAddress\r\n";

To lessen risk for header injections, include those in the body/message.

$comments .= "Abuse Sender: $name\n"; // needs sanitation
$comments .= "User Agent: $browser\n"; // needs sanitation
$comments .= "IP: $ipAddress\n";

-- 

  //Aho

Thread

PHP Mailto(); Twayne <nobody@spamcop.net> - 2013-06-30 19:29 -0400
  Re: PHP Mailto(); "J.O. Aho" <user@example.net> - 2013-07-01 07:03 +0200
    Re: PHP Mailto(); The Natural Philosopher <tnp@invalid.invalid> - 2013-07-01 10:08 +0100
      Re: PHP Mailto(); Twayne <nobody@spamcop.net> - 2013-07-01 10:33 -0400
    Re: PHP Mailto(); Twayne <nobody@spamcop.net> - 2013-07-01 10:23 -0400
      Re: PHP Mailto(); Tim Streater <timstreater@greenbee.net> - 2013-07-01 16:28 +0100
  Re: PHP Mailto(); bill <william@TechServSys.com> - 2013-07-01 07:50 -0400
    Re: PHP Mailto(); The Natural Philosopher <tnp@invalid.invalid> - 2013-07-01 12:59 +0100
      Re: PHP Mailto(); "J.O. Aho" <user@example.net> - 2013-07-01 14:47 +0200
        Re: PHP Mailto(); The Natural Philosopher <tnp@invalid.invalid> - 2013-07-01 14:09 +0100
    Re: PHP Mailto(); Twayne <nobody@spamcop.net> - 2013-07-01 10:10 -0400
      Re: PHP Mailto(); Tim Streater <timstreater@greenbee.net> - 2013-07-01 16:34 +0100
        Re: PHP Mailto(); The Natural Philosopher <tnp@invalid.invalid> - 2013-07-01 16:58 +0100
          Re: PHP Mailto(); Tim Streater <timstreater@greenbee.net> - 2013-07-01 18:24 +0100
            Re: PHP Mailto(); The Natural Philosopher <tnp@invalid.invalid> - 2013-07-01 18:47 +0100
              Re: PHP Mailto(); Tim Streater <timstreater@greenbee.net> - 2013-07-01 20:43 +0100
        Re: PHP Mailto(); "J.O. Aho" <user@example.net> - 2013-07-01 19:05 +0200
          Re: PHP Mailto(); Christoph Michael Becker <cmbecker69@arcor.de> - 2013-07-01 19:21 +0200
            Re: PHP Mailto(); "J.O. Aho" <user@example.net> - 2013-07-01 19:30 +0200

csiph-web