Databases
StackOverflow2013
Postsdbo
POsecurity and mail() function in php
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POsecurity and mail() function in php
    primarykey
    data
    text
    <p>I'm using mail() to send simple mails. For convenience, i'm using a header to set a "from" address. I wonder, I can put whichever address there and pretend to be anyone; I tried just towards myself for curiosity and actually it works! Is this normal? It's the correct way to use the mail function? and is there any way to recognize the identity of the sender of these mails?</p> <p>EDIT: I sent a mail to my self using my gmail address as "from" in the header of mail(). I received the message with these headers: </p> <pre><code>… Received: from smarty.dreamhost.com (smarty.dreamhost.com [208.113.175.8]) by mx.google.com with ESMTP id w21si2197938ybh.68.2010.10.19.19.33.30; Tue, 19 Oct 2010 19:33:30 -0700 (PDT) Received: from nationals.dreamhost.com (nationals.dreamhost.com [69.163.165.6]) by smarty.dreamhost.com (Postfix) with ESMTP id EB56D6E804A for &lt;myMail@gmail.com&gt;; Tue, 19 Oct 2010 19:33:29 -0700 (PDT) Received: by nationals.dreamhost.com (Postfix, from userid 3598506) id E4BB635C83F; Tue, 19 Oct 2010 19:33:29 -0700 (PDT) Return-Path: &lt;mySite@nationals.dreamhost.com&gt; Received-Spf: pass (google.com: domain of mySite@nationals.dreamhost.com designates 208.113.175.8 as permitted sender) client-ip=208.113.175.8; Authentication-Results: mx.google.com; spf=pass (google.com: domain of mySite@nationals.dreamhost.com designates 208.113.175.8 as permitted sender) smtp.mail=mySite@nationals.dreamhost.com </code></pre> <p><br><br> What happened? I can't interpretate headers, but look like google accepted the fake address!</p>
    singulars
    1. PO
      singulars
      1. PTAnswer
    1. This table or related slice is empty.
    1. PTQuestion
    1. USBakaburg
    1. USBakaburg
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POsecurity and mail() function in php
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. POsecurity and mail() function in php
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. POsecurity and mail() function in php
      1. This table or related slice is empty.
      1. VTUpMod
    1. COI don't know the specifics, but if you try to send an email with a from: header different than the domain name of the server which is sending it, gmail will detect that the address is spoofed, and add it to the spam folder.
      singulars
      1. POsecurity and mail() function in php
      1. USSam Dufel
    2. COThis also works for real mail!
      singulars
      1. POsecurity and mail() function in php
      1. USFrankie
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload