If using phpMailer - do I need additional security checks?

[chuckylefrek]

I have decided to replace all my mail functionality in my site with phpMailer as I have read that this will protect me from the likes of mail injection.

I just wanted to confirm what protection this will offer me and what additional security checks I should include in my form handling?

Thanks

Paul

[Mal Curtis]

You won't need to do any more 'security' checks on the input heading for phpMailer - however you will need to do all your standard validation checks to help out the usability of the form.

If the inputs are simply headed to the email, phpMailer has you sorted. If you're doing any other code with them - you'll need to make sure you're handling them well yourself.

phpMailer won't do things like remove unwanted html. So if a user wanted to, they could include html into their form submissions, and if you weren't stripping it then it may make it through to your html email. That's not so much security, as validation however.