Email injection exploit through a PHP contact form

Email injection exploit through a PHP contact form: If they find a ‘contact us’ page that is vulnerable they manipulate the form fields to add/change email headers. T