Spoofing an email

As we are in the mid of our golden jubilee celebration in Nigeria, a bomblast rocked the capital city of nigeria. Shortly afterward, an organisation th rough an email claimed responsibility. But people are insinuating that someone with good programming skill might be using the organisation's email through some PHP manueverings

quote....

Thats right. U can send email from any address without having access to the address if u know how. Its just a line of code in php so y cant anyone impersonate the non-existent organisation with or without the password?

There are even sites that offer this service or info on how to do it. see links below:

email.about.com/od/outlooktips/qt/How_to...dress_in_Outlook.htm
www.mobileread.com/forums/showthread.php?threadid=4857

The code below shows hoow u can send email from any address to any address so u guys should stop the unnecessary importance attached to the organisation's email account.


Code:
<?PHP

$from_name = "Mr. Anonymous";
$from_email = "any-address@any-domain.com";
$to_email = "press@anynewspaper.com";
$subject = "Mail Subject";
$message = "Your text goes here, ";

$headers = "From: ".$from_name." <".$from_email.">\r\n";
$headers .= "Reply-To: ".$from_email."\r\n";

mail($to_email, $subject, $message, $headers, "-f".$from_email);

echo "Mail Sent!";

?>

yes, spoofing the sent from addres isnt hard, you can do it from outlook express with no problems.

However a quick look at the email headers will show you the IP address of the email server it originated from, as well as the IP address of any other server that was involved in proccessing the email. (spam filters, virus scanners etc...)