diff --git a/src/form/contact-form-handler.php b/src/form/contact-form-handler.php index 3fbbd3e..c61b2b5 100644 --- a/src/form/contact-form-handler.php +++ b/src/form/contact-form-handler.php @@ -14,11 +14,12 @@ $domainFromMyEmail = ( ) ? '' : $myEmailSplitted[1]; -$wantedContact = filter_input(INPUT_POST, 'contactTo', FILTER_VALIDATE_EMAIL); +$wantedContact = filter_input(INPUT_POST, 'contactTo', FILTER_SANITIZE_SPECIAL_CHARS); $wantedContact = ( empty($wantedContact) + || strpos($wantedContact, '@') !== false + || strpos($wantedContact, '&') !== false || empty($domainFromMyEmail) - || substr($wantedContact, -strlen($domainFromMyEmail)) != $domainFromMyEmail ) ? $myEmail : "$wantedContact@$domainFromMyEmail" ; if(empty($_POST['namezzz']) || empty($_POST['emailzzz']) || empty($_POST['message'])) {