Re: Re: Bug 16200
| From: | David Coallier | Date: | Fri, 08 May 2009 07:20:35 +0000 |
| Subject: | Re: Re: Bug 16200 | ||
| References: | 1 2 3 | Groups: | php.pear.qa |
| Request: | Send a blank email to pear-qa+get-5309@lists.php.net to get a copy of this message | ||
2009/5/8 Christian Weiske <cweiske@cweiske.de>:
> Hi David,
>
>> What I recommend is that we use escapeshellarg on the arguments (From,
>> To, Cc, etc). This will cover the security bug. However we should
http://cvs.php.net/viewvc.cgi/pear/Mail/Mail/sendmail.php?r1=1.19&r2=1.20
Please see this revision and let me know what you think? If that's ok
with you I'll close the bug and I'd love for you guys to roll a
release please :)
Cheers,
--
Slan,
David