Edit report at https://bugs.php.net/bug.php?id=68776&edit=1
ID: 68776
Updated by: yohgaki@php.net
Reported by: yohgaki@php.net
Summary: mail() does not have mail header injection
prevention for additional headers
Status: Closed
Type: Bug
Package: Mail related
Operating System: any
PHP Version: Irrelevant
Assigned To: yohgaki
Block user comment: N
Private report: N
New Comment:
We are aware of that.
I'm going to handle it.
https://bugs.php.net/bug.php?id=69791
Previous Comments:
------------------------------------------------------------------------
[2015-06-23 09:45:00] chaos at isocity dot de
Now it has issues with:
mail('', $subject,'',imap_mail_compose($envelope, $body)));
Also this version of code:
function validateMail($str){
return
str_replace(array('\r\r','\r\0','\r\n\r\n','\n\n','\n\0'),'',$str);
}
mail('', $subject,'',validateMail(imap_mail_compose($envelope, $body))));
------------------------------------------------------------------------
[2015-06-10 09:15:19] jpauli@php.net
Automatic comment on behalf of yohgaki
Revision: http://git.php.net/?p=php-src.git;a=commit;h=4bf3f646eea270d93ef6b9ebcf285c77a70a733b
Log: Fixed bug #68776
------------------------------------------------------------------------
[2015-06-10 08:50:55] tyrael@php.net
Automatic comment on behalf of yohgaki
Revision: http://git.php.net/?p=php-src.git;a=commit;h=9d168b863e007c4e15ebe4d2eecabdf8b0582e30
Log: Fixed bug #68776
------------------------------------------------------------------------
[2015-06-10 07:42:55] tyrael@php.net
Automatic comment on behalf of yohgaki
Revision: http://git.php.net/?p=php-src.git;a=commit;h=13fbd03e9b054c4bd71d28a0151c74a30bed3970
Log: Fixed bug #68776
------------------------------------------------------------------------
[2015-06-10 05:12:16] stas@php.net
Automatic comment on behalf of yohgaki
Revision: http://git.php.net/?p=php-src.git;a=commit;h=9d168b863e007c4e15ebe4d2eecabdf8b0582e30
Log: Fixed bug #68776
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=68776
--
Edit this bug report at https://bugs.php.net/bug.php?id=68776&edit=1