Ahh... That would make more sense.. Doh!
Its PHP, he're is the specific function, you'll notice i'm trying foamcows logic, which i think should work as i did notice MIME: Version: in the attmepted attack, but anything to strengthen it further would be great, and always usefull in future...