#28766 [NEW]: Addresses with "&" in it are not escaped!

From: bt at weberg dot de Operating system: linux, debian PHP version: Irrelevant PHP Bug Type: Mail related Bug description: Addresses with "&" in it are not escaped! Description: ------------ I thought that the addresses passed to sendmail where escaped. It seems not to be. I have a problem with an email-receipient who gave me an address with an "&" in it an I got an error from the local shell-interpreter. The shell could not find the program... Reproduce code: --------------- Create a testscript with something like <?php mail("test&script@my.domain.de", "Error, or what?", "..."); ?> Expected result: ---------------- Sending the mail... Actual result: -------------- sh: line 1: script@my.domain.de: command not found can't close /usr/sbin/sendmail -- Edit bug report at http://bugs.php.net/?id=28766&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=28766&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=28766&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=28766&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=28766&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=28766&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=28766&r=needscript Try newer version: http://bugs.php.net/fix.php?id=28766&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=28766&r=support Expected behavior: http://bugs.php.net/fix.php?id=28766&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=28766&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=28766&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=28766&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=28766&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=28766&r=dst IIS Stability: http://bugs.php.net/fix.php?id=28766&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=28766&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=28766&r=float