Thursday, April 05, 2007

PHP E-mail Injections

Sending mail from a web page using a php script is easy, but can be dangerous if not done right.

http://php.net/manual/en/ref.mail.php
http://php.net/manual/en/function.mail.php

Useful guides and tips in securing PHP e-mail script
http://www.tutorialtastic.co.uk/page/php_mail_form_secure_and_protected
http://www.nyphp.org/phundamentals/email_header_injection.php
http://www.securephpwiki.com/index.php/Email_Injection

Generate PFX file using OPENSSL on Windows

Had a situation where a client needed a PFX with password for a particular setup. This is something I have not done before, so here are the ...