Is using variables like $from and $to in a mailer class less secure than hardcoding strings directly in the method?

Using variables like $from and $to in a mailer class can potentially be less secure than hardcoding strings directly in the method because it opens up the possibility of injection attacks if the variables are not properly sanitized. To solve this issue, it is important to sanitize and validate the input before using it in the mailer class to prevent any malicious code from being executed. 

// Example of sanitizing and validating input before using it in a mailer class
$from = filter_var($_POST['from'], FILTER_SANITIZE_EMAIL);
$to = filter_var($_POST['to'], FILTER_SANITIZE_EMAIL);

// Mailer class implementation
class Mailer {
    private $from;
    private $to;

    public function __construct($from, $to) {
        $this->from = $from;
        $this->to = $to;
    }

    public function sendEmail($subject, $message) {
        // Send email using $this->from and $this->to
    }
}

// Create a new instance of the Mailer class with sanitized input
$mailer = new Mailer($from, $to);
$mailer->sendEmail("Subject", "Message");

Keywords

variables $from $to mailer class security

Related Questions