=LiveCode...code=

--LINK TO PHP
put "http://www.%host%.com/phpScript.php" into tLink

put "csFrom=" & the urlEncode of pFrom after tData
put "&csTo=" & the urlEncode of pTo after tData
put "&csSubject=" & the urlEncode of pSubject after tData
put "&csMessage=" & the urlEncode of pMessage after tData
put "&csHeaders=" & the urlEncode of pHeaders after tData

--UPLOAD THE REQUEST
post tData to url tLink
return it



=PHP...code=
<?php

// FUNCTION TO STRIP CODE TAGS FROM INPUT FOR SECURITY

function _INPUT($name)

{

    if ($_SERVER['REQUEST_METHOD'] == 'GET')

        return strip_tags($_GET[$name]);

    if ($_SERVER['REQUEST_METHOD'] == 'POST')

        return strip_tags($_POST[$name]);

}



// FUNCTION TO CLEAN THE FILENAME AND CSDEV INPUT FOR SECURITY

function CS_clean_path_vars($data)

{

    $data = trim($data); // REMOVE SPACES

    $data = stripslashes($data); // REMOVE SOME SLASHES

    $data = htmlspecialchars($data); // REPLACE HTML SPECIAL CHARS

    //$data = str_replace(".", "", $data); //REPLACE "."s WITH ""s

	$data = str_replace("/", "", $data); //REPLACE "/"s WITH ""s  

    return $data;

}


// GET THE DATA USING THE INPUT FUNCTION INSTEAD OF GET FUNCTION

$csFrom = _INPUT('csFrom');

$csTo = _INPUT('csTo');

$csSubject = _INPUT('csSubject');

$csMessage = _INPUT('csMessage');

$csHeaders = _INPUT('csHeaders');



// CLEAN VARIABLES USED IN PATHING TO PREVENT DIRECTORY TRAVERSAL ATTACKS (EXAMPLE INPUT OF ../../index.php)

$csFrom = CS_clean_path_vars($csFrom);

$csTo = CS_clean_path_vars($csTo);
$csSubject = CS_clean_path_vars($csSubject);

$csMessage = CS_clean_path_vars($csMessage);
$csHeaders = CS_clean_path_vars($csHeaders);


mail($csTo,$csSubject,$csMessage,$csHeaders);

echo "mail sent";
?>