chagenbu                Thu Feb  8 14:33:24 2001 EDT

  Modified files:              
    /php4/pear/Mail     Sendmail.php 
  Log:
  die on backticks in an attempted from address, also.
  
  
Index: php4/pear/Mail/Sendmail.php
diff -u php4/pear/Mail/Sendmail.php:1.2 php4/pear/Mail/Sendmail.php:1.3
--- php4/pear/Mail/Sendmail.php:1.2     Wed Feb  7 12:56:02 2001
+++ php4/pear/Mail/Sendmail.php Thu Feb  8 14:33:24 2001
@@ -82,7 +82,8 @@
             return new PEAR_Error('No from address given.');
         } elseif (strstr($from, ' ') ||
                   strstr($from, ';') ||
-                  strstr($from, '&')) {
+                  strstr($from, '&') ||
+                  strstr($from, '`')) {
             return new PEAR_Error('From address specified with dangerous 
characters.');
         }
         



-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to