Convert PHP Eclipse projects into PDT projects
Posted on May 20, 2008, under Technology.
Found a great quick tip on converting existing Eclipse projects into PDT projects from the globalways Developer Blog.
Essentially you just add a few elements to the .project XML file, and then you have a PDT project! I’d recommend running the “Clean Project” task afterwards just to make sure your project is refreshed.
Email injection with PHP
Posted on September 27, 2005, under Technology.
SecurePHP has a very well written article on how to manipulate a PHP form with e-mail injection. The article goes step-by-step and builds up to how show a malicious user could send spam or worse through your form. If you use PHP to send e-mails, you should read this article.
Update: I just tested the outlined injections on a form I wrote that uses PEAR’s Mail package, and it appears that most of the injections fail.
In specific, as part of the validation routine, I check to see if the e-mail address is valid using the parseAddressList() method. However, that could still allow multiple recipients, and I will probably look at changing the validation to use isValidInetAddress().
