I realized yesterday that a contact form on our site was being exploited (header injection). I've been trying to block it, but things keep getting through.
I decided to set up a logging system — when someone uses the form, everything they submit is stored to a file using fopen, fwrite, and fclose
I spent all day trying to add this to our script. What I just realized is that if I call, for example, fopen("contact.log","a"); , the script crashes. EVERY TIME. I've wasted a day, and don't know what to do…