I'm using mail() to notify people based on an email address they entered in a form. Are there any significant risks of sending form data to the mail() function?
I validate the data using an email address checker but obviously that is pretty basic. I'm concerned that someone could core sendmail by entering in bad characters, etc.