Simon Willison’s Weblog

Email Injection - SecurePHP. Here’s a PHP hole I hadn’t heard about.