PHP mail() is a great built-in function for sending an email directly from your script for account confirmations, password resets, or sending notifications.

This article covers the mail() function from basic syntax to some best practices that will ensure your emails go where they need to and aren’t snagged by spam filters.

Basics of PHP mail()

If you’re new to the mail() function, think of it as PHP’s way of sending emails without needing an outside service.

It’s perfect for simple applications where you may only need to send a few messages now and then. Here’s what the basic setup looks like:  

mail(to, subject, message, headers, parameters);

Each part contributes something:

• To: Here you write the recipient’s email.
• Subject: Your email’s subject line, short yet sweet.
• Message: This is where you say what you want to say.
• Headers: This is optional and contains sender information, CCs, and where to set up for HTML.
• Parameters: To specify special instructions for a server, though you won’t always need it.

Now, let’s break down those elements so that you know how to create a good email that won’t be ignored or, even worse, flagged as spam.

Explaining the Parameters of the PHP mail() Function

Each parameter in the mail() function has a specific role, and using them can significantly impact the professionalism and credibility of your emails. Here’s a breakdown of how they work.  

To – Setting Your Recipient

This is pretty self-explanatory—it’s the address to who you want to send your message. If you’re sending to more than one person, separate multiple emails with commas. Just be aware that some servers have limits on multi-recipient emails, so it’s good to check on this if it applies.

Subject

The subject parameter is what pops up in the inbox, so this should be clear and to the point. Keep it under 78 characters so it doesn’t get cut off, and avoid all caps or symbols that appear too spammy. A concise subject goes a long way in making sure your email is actually opened.  

Message

Put the main content of your message here. Since this is the heart of your email, it should be free of clutter and very easy to read with line breaks (\r\n), not a giant block of text. If you’re using HTML, make that specification known in your headers so your formatting comes through as intended.  

Headers: Giving More Information

Headers can make your email look more legit and allow you to customize it a bit. Here, you can define who it’s from, a reply-to address, and even set the email to HTML format:

$headers = "From: [email protected]\r\n";
$headers .= "Reply-To: [email protected]\r\n";
$headers .= "Content-Type: text/html; charset=UTF-8\r\n";

In the following section, you will learn about sending secure emails and why that is an important thing to do when working with mail().

Alternatives and Securing Your Emails

Now, mail() might seem straightforward, but it is a function to be used carefully so as not to introduce vulnerabilities into your programs. Always validate email addresses, and don’t let untrusted data into headers. That way, you avoid header injection attacks, which could result in your email server being compromised.  

With high-volume or feature-rich emails, mail() just can’t be relied on. Third-party libraries (PHPMailer and SwiftMailer, for example) support SMTP authentication, which cuts down on problems with spam and allows further flexibility when formatting.

It’s a good idea to use such libraries if you want to ensure delivery or do mass communications reliably.  

Wrapping Up

By this point, you should be pretty comfortable with the use of the PHP mail() function. Great for smaller-scale applications, it’s incredibly important to know its limitations and best practices, which will help you decide when to move to something a little better.

Similar Reads

• PHP