cvs: php4 /pear/Mail Sendmail.php
| From: | Chuck Hagenbuch | Date: | Thu, 08 Feb 2001 22:33:24 +0000 |
| Subject: | cvs: php4 /pear/Mail Sendmail.php | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-3958@lists.php.net to get a copy of this message | ||
chagenbu Thu Feb 8 14:33:24 2001 EDT
Modified files:
/php4/pear/Mail Sendmail.php
Log:
die on backticks in an attempted from address, also.
Index: php4/pear/Mail/Sendmail.php
diff -u php4/pear/Mail/Sendmail.php:1.2 php4/pear/Mail/Sendmail.php:1.3
--- php4/pear/Mail/Sendmail.php:1.2 Wed Feb 7 12:56:02 2001
+++ php4/pear/Mail/Sendmail.php Thu Feb 8 14:33:24 2001
@@ -82,7 +82,8 @@
return new PEAR_Error('No from address given.');
} elseif (strstr($from, ' ') ||
strstr($from, ';') ||
- strstr($from, '&')) {
+ strstr($from, '&') ||
+ strstr($from, '`')) {
return new PEAR_Error('From address specified with dangerous characters.');
}