Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2024-12-22 17:18:32 +01:00
Code Issues Projects Releases Wiki Activity

Properly sanitize e-mail addresses in wp-mail.php. Props giannis1. fixes #5169 for trunk

Browse Source 
git-svn-id: http://svn.automattic.com/wordpress/trunk@6212 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
markjaquith 2007-10-09 22:15:37 +00:00
parent a8ede71d87
commit 1b7798d214
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
wp-mail.php
View File

@ -63,9 +63,8 @@ for ($i=1; $i <= $count; $i++) :
// Set the author using the email address (To or Reply-To, the last used) // Set the author using the email address (To or Reply-To, the last used)
// otherwise use the site admin // otherwise use the site admin
if (preg_match('/From: /', $line) | preg_match('/Reply-To: /', $line)) { if (preg_match('/From: /', $line) | preg_match('/Reply-To: /', $line)) {
$author=trim($line); $author = sanitize_email($line);
if ( ereg("([a-zA-Z0-9\_\-\.]+@[\a-zA-z0-9\_\-\.]+)", $author , $regs) ) { if ( is_email($author) ) {
$author = $regs[1];
echo "Author = {$author} <p>"; echo "Author = {$author} <p>";
$author = $wpdb->escape($author); $author = $wpdb->escape($author);
$result = $wpdb->get_row("SELECT ID FROM $wpdb->users WHERE user_email='$author' LIMIT 1"); $result = $wpdb->get_row("SELECT ID FROM $wpdb->users WHERE user_email='$author' LIMIT 1");