Play SAH Search Log in Register / Forams

SUPERJER FORAMS

Sending email from another person's mail

Sending email from another person's mail

if( while ) switch{ coding } ++ — Page [1]

Mate de Vita
Kelli

2008 Oct 4 • 2453
159 ₧

So, my schoolmate claimed today that he can send an email to someone and make it say e.g. superjer@hotmail.com under receiver, so that Someone thinks the email is actually from superjer.
Also if Someone decides to reply to this email, he will send the email to superjer@hotmail.com, not my friend's real address.

Naturally my friend wouldn't share the instructions on how to do it with me, so that he can try to prank me some time in the future.

It may be worth mentioning that this friend of mine is learning php.

So, any idea how he can do that (or if he can do that)?

...and that's the bottom line because Mate de Vita said so.

≡

2009 Dec 4 at 23:02 UTC — Ed. 2009 Dec 4 at 23:02 UTC

Down Rodeo
Cap'n Moth of the Firehouse

2007 Oct 19 • 5486
57,583 ₧

He can, it's called "spoofing headers". Dunno how though.

I give a little into the moment like I'm standing at the edge (I know)
That no-one's gonna turn me 'round
Just one more step, I could let go

≡

2009 Dec 4 at 23:19 UTC

SuperJer
Websiteman

2005 Mar 21 • 6670

This is very easy to do. For example in PHP:

php code

<?php
  $to = "you@example.com";
  $subj = "Spoofed mail from Jer";
  $body = "Hello there";
  $headers = "From: Jer <superjer@hotmail.com>";
  $sendmail_params = "-fsuperjer@hotmail.com";
  mail($to,$subj,$body,$headers,$sendmail_params);
?>

I use this all the time for sending email from automated systems on SuperJer.com, ClassifiedAds.com and other sites.

But if hotmail is using SPF, and your email server or client bothers to check SPF records, the email should get marked as spam or dropped completely.

SPF ensures that only authorized IP addresses can send mail on behalf of a particular domain, but only if your email system checks the records.

≡

2009 Dec 5 at 00:32 UTC — Ed. 2009 Dec 5 at 00:35 UTC

Page [1]