4 ms·
RFC 822 and some email-related systems accept commas as valid and to mean multiple receivers. This can be dangerous if user-inputted strings aren't properly fil
by a2128 4y ago
RFC 822 and some email-related systems accept commas as valid and to mean multiple receivers. This can be dangerous if user-inputted strings aren't properly filtered. I recall a website that would accept "bob@example.com,admin@company.com" as a valid email, send the verification to both emails, and grant administrative privileges to the site once verified, since the email clearly ends in @company.com and belongs to the company!
- idk1 4y agoI'm curious, I've always validated an email as containin only one '@' and kept it that simple. This validation would cause that input to be rejected. I would love to know if my assumption was right, can an email address only have one `@`?
- 3np 4y agoWhat GP is saying is that yes, multiple @ could be a valid address. Your solution (rejecting them) sounds reasonable for sign-up checks I guess but you want to keep receiving incoming mail from such addresses for normal communication.