From 731034632891869b2278089393524df9b1539cc6 Mon Sep 17 00:00:00 2001 From: ryan Date: Mon, 23 Jan 2006 23:49:22 +0000 Subject: [PATCH] wp-mail quote escaping fix from majelbstoat. fixes #2209 git-svn-id: http://svn.automattic.com/wordpress/trunk@3475 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-mail.php | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/wp-mail.php b/wp-mail.php index 2b2fcc24e3..6c62fbad6b 100644 --- a/wp-mail.php +++ b/wp-mail.php @@ -61,8 +61,10 @@ for ($i=1; $i <= $count; $i++) : if (preg_match('/From: /', $line) | preg_match('Reply-To: /', $line)) { $author=trim($line); if ( ereg("([a-zA-Z0-9\_\-\.]+@[\a-zA-z0-9\_\-\.]+)", $author , $regs) ) { - echo "Author = {$regs[1]}

"; - $result = $wpdb->get_row("SELECT ID FROM $tableusers WHERE user_email='$regs[1]' ORDER BY ID DESC LIMIT 1"); + $author = $regs[1]; + echo "Author = {$author}

"; + $author = $wpdb->escape($author); + $result = $wpdb->get_row("SELECT ID FROM $wpdb->users WHERE user_email='$author' LIMIT 1"); if (!$result) $post_author = 1; else