Forms

setup headers for the email always use server@gaslightmedia.com as the From header unless we know for sure we have one for the client that will not be used in any To.

Reply-To header should be set with a email address that is the form users email and name. This needs to be cleaned up as far as what is allowed to prevent anyone from adding newlines and new headers.

If the form has some type of payment option and we are sending form information then we need to make sure there is no credit card data in the email going out. Treat any email that is sent as unsecured.