Bug #17568 Updated: Fifth parameter doesn't work correct
ID: 17568
Updated by: derick@php.net
Reported By: ruudb@stress.utwente.nl
Status: Open
Bug Type: Mail related
Operating System: Debian GNU/Linux 2.2
PHP Version: 4.2.1
New Comment:
Not allowing a space is not totally true. The parameter is escaped
accoding the rules of shell_escape (which add's ' around the script and
escapes existing ''s).
Derick
Previous Comments:
------------------------------------------------------------------------
[2002-06-02 18:38:56] mfischer@php.net
I don't like this behaviour either but there are some pretty security
concerns here. Maybe this can be sorted out, but I can't tell you
anything right now. Don't count on this being changed soon.
------------------------------------------------------------------------
[2002-06-02 18:36:11] ruudb@stress.utwente.nl
Thanks for your extremely fast answer. Anyway, it is a real problem in
that case. From the sendmail docs: "Note that there _must_ be a space
between the letter 'O' and the name of the option."
Btw, the combination of these two options worked in the 4.0.5/4.0.6
version of PHP.
------------------------------------------------------------------------
[2002-06-02 18:31:47] mfischer@php.net
The fifth one doesn't work because it contains a space. Only one
parameter without space is allowed currently . . .
------------------------------------------------------------------------
[2002-06-02 18:24:21] ruudb@stress.utwente.nl
A small scripting part:
--=[ CUT ]=--
$params="-f".$userinfo[$i][sa_email]." -O deliverymode=q";
mail($to, $subject, $message, $header, $params);
--=[ CUT ]=--
This used to work in the PHP 4.0.6 version, but since 4.1.0 this
results in sendmail errors:
Jun 2 23:49:38 iBBS-01 sendmail[2930]: XAA02930:
to=removed.address@stress.utwente.nl -O deliverymode=q, delay=00:00:00,
xdelay=00
:00:00, mailer=esmtp, relay=stress.utwente.nl.-o.deliverymode=q,
stat=Host unknown (Name server: stress.utwente.nl.-o.delivery
mode=q: host not found)
I think the sequence in which paramters are offered to sendmail has
changed from PHP 4.0.6 to PHP 4.1.0. The problem still persists in PHP
4.2.1.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=17568&edit=1
Thread (7 messages)