You’re letting anyone with an email address send mail (through your service) to another address. It looks like the spammer wouldn’t be able to completely contro

You’re letting anyone with an email address send mail (through your service) to another address. It looks like the spammer wouldn’t be able to completely control the contents of the message, but they could still send unsolicited junk emails from your email provider or server, which might get your email or IP address blacklisted by spam filters and prevent legitimate users’ emails from being delivered. I would implement heavy rate limiting and maybe come up with a basic captcha that would stop most spammers. Oh, and by the way: if you want italics there can’t be a space between the asterisk and the phrase to be italicized (like * this * versus this).