CODEWITHSUNDEEP
php
CSS Apprentice
CSS Apprentice

Reputation: 939

PHP Contact Form Coming From Admin's Email

I made a PHP Contact Form using this tutorial and it works great, but I've encountered one potential security risk / inconvenience. Each email I receive comes from my admin login name.

I added $headers as this thread instructed, but to no avail.

My Current PHP:

<?php
    $name = $_POST['name'];
    $email = $_POST['email'];
    $phone = $_POST['phone'];
    $message = $_POST['message'];
    $from = $_POST['email']; 
    $to = '[email protected]';
    $subject = 'Estimate Contact Form';

    $headers = "From: $email\r\n";                 /* I added this */
    $headers .= "Reply-To: $email\r\n";            /*     and this */

    $body = "From: $name\n Phone: $phone\n E-Mail: $email\n Message:\n $message";

    if ($_POST['submit']) {
        if (mail ($to, $subject, $body, $from, $headers)) { 
            echo '<p>Your message has been sent!</p>';
        } else { 
            echo '<p>Something went wrong, go back and try again!</p>'; 
        }
    }
?>

What exactly am I missing? Any help is greatly appreciated. Thank you!

Upvotes: 1

Views: 68

Answers (1)

Adam Link
Adam Link

Reputation: 2793

Your mail() function call has an extra parameter it looks like. The correct mail() call should be:

if (mail($to, $subject,$body,$headers)) {
  ....
}

So just remove the $from portion and it should be good.

Upvotes: 4

Related Questions