Previously, James Ian Thorne said:
> An alternative is:
>
> if $message_body contains "name=\"readme.exe\"" then
> [ your desired actions ]
> endif
>
> It has been catching the emails fine, as far as I am aware.
Note that the double-quotes aren't always present, so I usually
have something more like
if ( $message_body contains "name=\"readme.exe\""
or $message_body contains "name=readme.exe" )
then
[ desired actions ]
endif
--
Our doubts are traitors / And make us lose the good we might oft win,
By fearing to attempt. -William Shakespeare, Measure for Measure
