>>168
極端な書き方だが
mb_send_mail($to, $subject, $_SERVER["SERVER_NAME"], $header);
で$_SERVERの箇所にhtmlspecialcharsは必要？