svn: /phpdoc/ja/trunk/reference/ filesystem/functions/mkdir.xml mail/functions/mail.xml mbstring/functions/mb-send-mail.xml

From:	TAKAGI Masahiro	Date:	Tue, 07 Jan 2014 20:48:57 +0000
Subject:	svn: /phpdoc/ja/trunk/reference/ filesystem/functions/mkdir.xml mail/functions/mail.xml mbstring/functions/mb-send-mail.xml
Groups:	php.doc.ja
Request:	Send a blank email to doc-ja+get-4140@lists.php.net to get a copy of this message

takagi Tue, 07 Jan 2014 20:48:57 +0000 Revision: http://svn.php.net/viewvc?view=revision&revision=332584 Log: Sync with en Changed paths: U phpdoc/ja/trunk/reference/filesystem/functions/mkdir.xml U phpdoc/ja/trunk/reference/mail/functions/mail.xml U phpdoc/ja/trunk/reference/mbstring/functions/mb-send-mail.xml Modified: phpdoc/ja/trunk/reference/filesystem/functions/mkdir.xml =================================================================== --- phpdoc/ja/trunk/reference/filesystem/functions/mkdir.xml 2014-01-06 20:35:29 UTC (rev 332583) +++ phpdoc/ja/trunk/reference/filesystem/functions/mkdir.xml 2014-01-07 20:48:57 UTC (rev 332584) @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="utf-8"?>  - +  <refentry xmlns="http://docbook.org/ns/docbook" xml:id="function.mkdir"> <refnamediv> @@ -145,7 +145,7 @@ // 入れ子構造を作るには、$recursive パラメータを // mkdir() に指定しなければなりません -if (!mkdir($structure, 0, true)) { +if (!mkdir($structure, 0777, true)) { die('Failed to create folders...'); } Modified: phpdoc/ja/trunk/reference/mail/functions/mail.xml =================================================================== --- phpdoc/ja/trunk/reference/mail/functions/mail.xml 2014-01-06 20:35:29 UTC (rev 332583) +++ phpdoc/ja/trunk/reference/mail/functions/mail.xml 2014-01-07 20:48:57 UTC (rev 332584) @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="utf-8"?>  - +  <refentry xml:id="function.mail" xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink"> <refnamediv> @@ -94,6 +94,7 @@ <para> 通常、これは追加のヘッダ（From、Cc、Bcc）のために用いられます。複数のヘッダを追加する場合は CRLF（\r\n）で区切ります。 + Validate parameter not to be injected unwanted headers by attackers. </para> <note> <para> @@ -134,6 +135,17 @@ エンベロープの sender アドレスを設定する際に使用できます。 </para> <para> + This parameter is escaped by <function>escapeshellcmd</function> internally + to prevent command execution. <function>escapeshellcmd</function> prevents + command execution, but allows to add addtional parameters. For security reason, + this parameter should be validated. + </para> + <para> + Since <function>escapeshellcmd</function> is applied automatically, some characters + that are allowed as email addresses by internet RFCs cannot be used. Programs + that are required to use these characters <function>mail</function> cannot be used. + </para> + <para> この方法でエンベロープの sender ヘッダ（-f）を設定する際は、 'X-Warning' ヘッダが付加されないように Web サーバーの実行ユーザーを sendmail 設定に追加しておく必要があるかもしれません。 Modified: phpdoc/ja/trunk/reference/mbstring/functions/mb-send-mail.xml =================================================================== --- phpdoc/ja/trunk/reference/mbstring/functions/mb-send-mail.xml 2014-01-06 20:35:29 UTC (rev 332583) +++ phpdoc/ja/trunk/reference/mbstring/functions/mb-send-mail.xml 2014-01-07 20:48:57 UTC (rev 332584) @@ -1,6 +1,6 @@ <?xml version="1.0" encoding="utf-8"?>  - +  <refentry xml:id="function.mb-send-mail" xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink"> <refnamediv> @@ -66,6 +66,7 @@ <para> 通常、これは追加のヘッダ（From、Cc、Bcc）のために用いられます。複数のヘッダを追加する場合は CRLF（\r\n）で区切ります。 + Validate parameter not to be injected unwanted headers by attackers. </para> <note> <para> @@ -102,6 +103,23 @@ コマンドライン引数です。sendmail を利用する際に正しい Return-Path を設定するためなどに利用すると便利です。 </para> + <para> + This parameter is escaped by <function>escapeshellcmd</function> internally + to prevent command execution. <function>escapeshellcmd</function> prevents + command execution, but allows to add addtional parameters. For security reason, + this parameter should be validated. + </para> + <para> + Since <function>escapeshellcmd</function> is applied automatically, some characters + that are allowed as email addresses by internet RFCs cannot be used. Programs + that are required to use these characters <function>mail</function> cannot be used. + </para> + <para> + The user that the webserver runs as should be added as a trusted user to the + sendmail configuration to prevent a 'X-Warning' header from being added + to the message when the envelope sender (-f) is set using this method. + For sendmail users, this file is <filename>/etc/mail/trusted-users</filename>. + </para> </listitem> </varlistentry> </variablelist>