PHP forwarding from HTML Form

[mringuk]

I have a Form within my HTML Club Site which works fine. However, as someone new to PHP I am having some difficulty making 2 modifications.

Present Coding:

<?php

$sendTo = "[e-mail]";

$subject = "Contact from site";

$headers = "From: " . $_POST["name"] . "<" . $_POST["Email"] .">" . "\r\n";

$headers .= "Reply-To: " . $_POST["eEmail"] . "\r\n";

$headers .= "Return-path: " . $_POST["E-mail"];


$message = "The following information has been submitted by " .$_POST["name"] . "\r\n" . "\r\n" . "E-mail Address               : " . $_POST["Email"] . "\r\n" . "First Name     : " . $_POST["name1"] . "\r\n" . "Last Name     : " . $_POST["name2"] . "\r\n" . "Address 1     : " . $_POST["address1"] . "\r\n" . "Address 2    : " . $_POST["address2"] . "\r\n" . "Zip or Post Code : " . $_POST["post_code"] . "\r\n" . "Comments     : " . $_POST["comments"];


mail($sendTo, $subject, $message, $headers);

header( 'Location: http://www.mysite.com/thanks.html' ) ;

?>

I would like to send a BCC e-mail to a second recipient. I can send to a second e-mail by changing that first line:

$sendTo = "[e-mail],[e-mail]";

That also works but I can't get it to BCC:

My second wish is to send the e-mail back to the person filling in the Form, $_POST["Email"] How is this done?

ny advice would be most appreciated

[bradgrafelman]

When posting PHP code, please use the board's [noparse]

..

[/noparse] bbcode tags as they make your code much easier to read and analyze.

As for your problem, you simply need to ad another header to the message in the form of: "BCC: <email>".

The first parameter of the mail() call is really just a shortcut to adding a 'To: <email>' header to the e-mail, since an e-mail really only consists of a header and body.

Also note that you should add a 'Sender' header that points to an e-mail address on your domain (e.g. the same domain from which the e-mails are being sent), unless such a header is already being added automatically by your MTA. Otherwise, you run the risk of being labeled as an open relay and automatically blacklisted from many e-mail servers.

Finally, note that you should never use any user-supplied data in the headers area without first sanitizing it; otherwise, your code will be vulnerable to header injection attacks. For validating e-mail addresses, for example, you could use [man]filter_var/man with the FILTER_VALIDATE_EMAIL option.