Essentially you just add a few elements to the .project XML file, and then you have a PDT project! I’d recommend running the “Clean Project” task afterwards just to make sure your project is refreshed.

Update: I just tested the outlined injections on a form I wrote that uses PEAR’s Mail package, and it appears that most of the injections fail.

In specific, as part of the validation routine, I check to see if the e-mail address is valid using the parseAddressList() method. However, that could still allow multiple recipients, and I will probably look at changing the validation to use isValidInetAddress().