public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-13 21:25:55 +00:00
Code Issues Releases Wiki Activity

fix vulnerability in PHPMailer

Browse Source
This commit is contained in:
Andrew Dolgov
2007-11-23 03:48:07 +01:00
parent 11063ec65c
commit 090ac2fea0
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
phpmailer/class.phpmailer.php
View File

@@ -390,9 +390,11 @@ class PHPMailer
*/ */
function SendmailSend($header, $body) { function SendmailSend($header, $body) {
if ($this->Sender != "") if ($this->Sender != "")
$sendmail = sprintf("%s -oi -f %s -t", $this->Sendmail, $this->Sender); $sendmail = sprintf("%s -oi -f %s -t",
escapeshellcmd($this->Sendmail), escapeshellarg($this->Sender));
else else
$sendmail = sprintf("%s -oi -t", $this->Sendmail); $sendmail = sprintf("%s -oi -t",
escapeshellcmd($this->Sendmail));
if(!@$mail = popen($sendmail, "w")) if(!@$mail = popen($sendmail, "w"))
{ {