How to sanitze user input in PHP before mailing?

Question

I have a simple PHP mailer script that takes values from a form submitted via POST and mails them to me: ``` <?php $to = "me@example.com"; $name = $_POST['name']; $message = $_POST['message']; $email = $_POST['email']; $body = "Person $name submitted a message: $message"; $subject = "A message has been submitted"; $headers = 'From: ' . $email; mail($to, $subject, $body, $headers); header("Location: http://example.com/thanks"); ?> ``` How can I sanitize the input?

Accepted Answer

Sanitize the post variable with `filter_var()`.

Example here. Like:

```
echo filter_var($_POST['email'], FILTER_SANITIZE_EMAIL);   
```

How to sanitze user input in PHP before mailing?

Solution

Problem