<?php
# define modes for sanitize()
# 
define("V_EMAIL", 1);
define("V_HEADER", 2);

# To use the sanitize function, include "sanitize.inc" in your PHP 
# application.
#
# sanitize($array)
#
# sanitize() accepts an associative array of variable names (expressed 
# as strings) associated with a defined type which is either V_EMAIL
# (email address) or V_HEADER (other text header).  The function
# validates the varible associated with the string, in the first case
# as a valid simple email address and in the second case as a string
# free of newlines which might be used to spoof the PHP mail()
# function into inserting additional headers (see
# http://us2.php.net/manual/en/function.mail.php#59661)
#
# sanitize returns True if all variables in $array are sanitary,
# otherwise it returns False. 
# 
function sanitize($array, $wc=FALSE) {
        foreach ($array as $key => $value) {
                global $$key;
                if ($value == V_EMAIL) {
                        if ($wc) {
                        	if (!preg_match("/^[-*\w.]+@([A-z*0-9]+\.)*([A-z*0-9][-A-z*0-9]+\.)+[A-z]{2,4}$/", $$key)) return False;
                        } else {
                        	if (!preg_match("/^[-\w.]+@([A-z0-9]+\.)*([A-z0-9][-A-z0-9]+\.)+[A-z]{2,4}$/", $$key)) return False;
                        }
                }
                if ($value == V_HEADER) {
                        if (preg_match("/[\r\n]/", $$key)) return False;
                }
        }
        return True;
}


?>