From: peter Date: 2007-03-12T23:34:28+09:00 Subject: Re: Help with NET::SMTP Yes I understand that, removing the '' fails, as does adding "" or anything I have tried. I can remove the () and [] and as long as I use a proper email address instead of a var it works. [Mon Mar 12 10:14:04 2007] [error] mod_ruby: error in ruby [Mon Mar 12 10:14:04 2007] [error] mod_ruby: /usr/lib/ruby/1.8/net/smtp.rb:540:in `send0': tainted to_addr (SecurityError) > > > > > > not: > smtp.open_message_stream('sender@mail.com', ['email']) do > > > but: > smtp.open_message_stream('sender@mail.com', [email]) do > > Those quotes mean that you are making an array with the literal string 'email' > > email="joe.blow@somedomain.com" > ['email'] => [ 'email'] > > [email] => ["joe.blow@somedomain.com"] >