PHP mail

[lak]

I send a mail by using the PHP functions.

I want to find whether the message is send by the original user or
some one send the message in another name.

For example:
In the PHP mail function I specified the from address as some other
user name.
How can I find, whether that user sends the mail or it is send by some
other user using PHP script

How can we check that.

[rf]

Re: PHP mail


"lak" <lakindia89@gma il.comwrote in message
news:54776a39-c472-43b6-8672-850b258b42a3@i1 8g2000prf.googl egroups.com...

>I send a mail by using the PHP functions.
>
I want to find whether the message is send by the original user or
some one send the message in another name.
>
For example:
In the PHP mail function I specified the from address as some other
user name.
How can I find, whether that user sends the mail or it is send by some
other user using PHP script
>
How can we check that.

Er, what?

[Jerry Stuckle]

Re: PHP mail

lak wrote:

I send a mail by using the PHP functions.
>
I want to find whether the message is send by the original user or
some one send the message in another name.
>
For example:
In the PHP mail function I specified the from address as some other
user name.
How can I find, whether that user sends the mail or it is send by some
other user using PHP script
>
How can we check that.
>

You can't.

--
=============== ===
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attgl obal.net
=============== ===

[C. (http://symcbean.blogspot.com/)]

Re: PHP mail

On 30 Oct, 09:28, lak <lakindi...@gma il.comwrote:

I send a mail by using the PHP functions.
>
I want to find whether the message is send by the original user or
some one send the message in another name.
>
For example:
In the PHP mail function I specified the from address as some other
user name.
How can I find, whether that user sends the mail or it is send by some
other user using PHP script
>
How can we check that.

If you want to establish the origin of an email, then the only
effective way to do so is via encryption using a key that the 'other'
person using the account does not have access to. How you implement
this is pretty much up to yourself. PGP (and GPG) use assymetric
encryption alogirthms - formerly the signature was appended to the end
of the email but more recent versions include the signature as an
attachment in the same way that x509 signed emails work. But you could
easily just generate a sha1 hash of the message body (contatenated
with a secret salt) and add that as an extra header, e.g. X-My-
Validation: $hashed

C.

[Charles Calvert]

Re: PHP mail

On Thu, 30 Oct 2008 02:28:12 -0700 (PDT), lak <lakindia89@gma il.com>
wrote in
<54776a39-c472-43b6-8672-850b258b42a3@i1 8g2000prf.googl egroups.com>:

>I send a mail by using the PHP functions.
>
>I want to find whether the message is send by the original user or
>some one send the message in another name.
>
>For example:
>In the PHP mail function I specified the from address as some other
>user name.
>How can I find, whether that user sends the mail or it is send by some
>other user using PHP script
>
>How can we check that.

You can't in any absolute sense. Any header that isn't added by the
receiving mail server can be forged, absent verifiable cryptographic
signing of the headers.

At best you might be able to check the X-Mailer header to see if it's
a known client, but that won't always be present even in messages sent
by a human and it can be easily added to a message sent by a script.
--
Charles Calvert | Web-site Design/Development
Celtic Wolf, Inc. | Software Design/Development
http://www.celticwolf.com/ | Data Conversion
(703) 580-0210 | Project Management