Riguardo l'email injection: http://www.damonkohler.com/2008/12/email-injection.html