On the php manual page for mail function, there was a user comment saying \"take care to prevent header injection\".