Yes I understand that, removing the '' fails, as does adding "" or
anything I have tried. I can remove the () and [] and as long as I use a
proper email address instead of a var it works.


[Mon Mar 12 10:14:04 2007] [error] mod_ruby: error in ruby
[Mon Mar 12 10:14:04 2007] [error]
mod_ruby: /usr/lib/ruby/1.8/net/smtp.rb:540:in `send0': tainted to_addr
(SecurityError)




> >
> >
> 
> not:
> smtp.open_message_stream('sender / mail.com', ['email']) do
> 
> 
> but:
> smtp.open_message_stream('sender / mail.com', [email]) do
> 
> Those quotes mean that you are making an array with the literal string 'email'
> 
> email="joe.blow / somedomain.com"
> ['email'] => [ 'email']
> 
> [email] => ["joe.blow / somedomain.com"]
>