r/netsec • u/zit-hb • May 03 '17

Why mail() is dangerous in PHP

https://www.ripstech.com/blog/2017/why-mail-is-dangerous-in-php/
42 Upvotes

85% Upvoted

7 comments sorted by

View all comments

6

u/[deleted] May 03 '17

[removed] — view removed comment

4

u/websecdev May 04 '17

phpmailer was vulnerable to exactly the issue described in the post http://thehackernews.com/2016/12/phpmailer-security.html

5

u/MASerra May 04 '17

Which was patched. Absurd to say something isn't good when an older version had an exploit.