?>< ?php $to = 'myemail'; $subject = 'test'; $text = 'test2'; $header = 'test3'; mail($to,$subject,$text,$header); ?>< ?php

(without the spaces behind the < ).

In $_POST['var2'] field on my websites form to test the difference between strip_tags($_POST['']) and regular unprotected $_POST[''].

That $_POST[''] field together with a couple more feed into a $url variable below:

$url = 'ourwebsite/filecontainingthis$urlvariable.php?VAR1='.strip_tags($_POST['var1'].'&VAR2='.$_POST['var2'].'&VAR3='.strip_tags($_POST['var3']);