Replacing deprecated eregi() with stristr(). Is this php mail script secure from header injections?
问题 I've been using the same php script to send emails from contact forms for years. But when my web server upgraded to php 5.3 the call to eregi was causing deprecated errors to display. After a Google search I learned that I could use stristr instead of eregi. When I make this simple switch everything works just fine, but I'm no php wizard so I want to know if my script is still secure from header injections. Can someone please put my mind at ease and confirm that this script is safe (or at