HNHacker News
TopNewBestAskShowJobs

jexyru

2 karma · joined December 28, 2016

submissionscomments
jexyru··on PHPMailer Exploit – Remote Code Execution
This discussion is broken by design. Using user input from contact form as "From" address for emails, sent from your site, is the mistake of your application - you should use something like "noreply@yoursite.com", why you put user email there? In addition - most probably such emails will not pass spam filters.