What are the potential security risks of using the mail() function in PHP for sending emails from a contact form?

The potential security risks of using the mail() function in PHP for sending emails from a contact form include vulnerability to email injection attacks, lack of proper validation and sanitization of user input, and potential for spamming. To mitigate these risks, it is recommended to use a library like PHPMailer or SwiftMailer which provide more secure and reliable ways to send emails. 

// Example using PHPMailer library for sending emails securely

use PHPMailer\PHPMailer\PHPMailer;
use PHPMailer\PHPMailer\Exception;

require 'vendor/autoload.php';

$mail = new PHPMailer(true);

try {
    //Server settings
    $mail->isSMTP();
    $mail->Host = 'smtp.example.com';
    $mail->SMTPAuth = true;
    $mail->Username = 'your@example.com';
    $mail->Password = 'yourpassword';
    $mail->SMTPSecure = 'tls';
    $mail->Port = 587;

    //Recipients
    $mail->setFrom('from@example.com', 'Your Name');
    $mail->addAddress('recipient@example.com', 'Recipient Name');

    //Content
    $mail->isHTML(true);
    $mail->Subject = 'Subject';
    $mail->Body    = 'This is the HTML message body <b>in bold!</b>';

    $mail->send();
    echo 'Message has been sent';
} catch (Exception $e) {
    echo "Message could not be sent. Mailer Error: {$mail->ErrorInfo}";
}

Keywords

mail function security risks PHP contact form email sending

Related Questions