Bug #68776 [Com]: mail() does not have mail header injection prevention for additional headers

From: Date: Tue, 23 Jun 2015 09:45:01 +0000
Subject: Bug #68776 [Com]: mail() does not have mail header injection prevention for additional headers
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-193790@lists.php.net to get a copy of this message 
Edit report at https://bugs.php.net/bug.php?id=68776&edit=1

 ID:                 68776
 Comment by:         chaos at isocity dot de
 Reported by:        yohgaki@php.net
 Summary:            mail() does not have mail header injection
                     prevention for additional headers
 Status:             Closed
 Type:               Bug
 Package:            Mail related
 Operating System:   any
 PHP Version:        Irrelevant
 Assigned To:        yohgaki
 Block user comment: N
 Private report:     N

 New Comment:

Now it has issues with:

mail('', $subject,'',imap_mail_compose($envelope, $body)));

Also this version of code:

function validateMail($str){
 return
str_replace(array('\r\r','\r\0','\r\n\r\n','\n\n','\n\0'),'',$str);
}
mail('', $subject,'',validateMail(imap_mail_compose($envelope, $body))));


Previous Comments:
------------------------------------------------------------------------
[2015-06-10 09:15:19] jpauli@php.net

Automatic comment on behalf of yohgaki
Revision: http://git.php.net/?p=php-src.git;a=commit;h=4bf3f646eea270d93ef6b9ebcf285c77a70a733b
Log: Fixed bug #68776

------------------------------------------------------------------------
[2015-06-10 08:50:55] tyrael@php.net

Automatic comment on behalf of yohgaki
Revision: http://git.php.net/?p=php-src.git;a=commit;h=9d168b863e007c4e15ebe4d2eecabdf8b0582e30
Log: Fixed bug #68776

------------------------------------------------------------------------
[2015-06-10 07:42:55] tyrael@php.net

Automatic comment on behalf of yohgaki
Revision: http://git.php.net/?p=php-src.git;a=commit;h=13fbd03e9b054c4bd71d28a0151c74a30bed3970
Log: Fixed bug #68776

------------------------------------------------------------------------
[2015-06-10 05:12:16] stas@php.net

Automatic comment on behalf of yohgaki
Revision: http://git.php.net/?p=php-src.git;a=commit;h=9d168b863e007c4e15ebe4d2eecabdf8b0582e30
Log: Fixed bug #68776

------------------------------------------------------------------------
[2015-06-10 04:40:10] stas@php.net

Automatic comment on behalf of yohgaki
Revision: http://git.php.net/?p=php-src.git;a=commit;h=9d168b863e007c4e15ebe4d2eecabdf8b0582e30
Log: Fixed bug #68776

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=68776


--
Edit this bug report at https://bugs.php.net/bug.php?id=68776&edit=1

Thread (16 messages)

« previous php.bugs (#193790) next »