From b7f907b875ddd9320cad6113d233eeafc5f1f5a5 Mon Sep 17 00:00:00 2001 From: ryan Date: Tue, 18 Dec 2007 20:06:37 +0000 Subject: [PATCH] Escape pop3 error messages. Props xknown. fixes #5484 git-svn-id: http://svn.automattic.com/wordpress/trunk@6404 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-mail.php | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/wp-mail.php b/wp-mail.php index c8884f6f78..8ccdf03b64 100644 --- a/wp-mail.php +++ b/wp-mail.php @@ -12,14 +12,14 @@ $phone_delim = '::'; $pop3 = new POP3(); if (!$pop3->connect(get_option('mailserver_url'), get_option('mailserver_port'))) - wp_die($pop3->ERROR); + wp_die(wp_specialchars($pop3->ERROR)); if (!$pop3->user(get_option('mailserver_login'))) - wp_die($pop3->ERROR); + wp_die(wp_specialchars($pop3->ERROR)); $count = $pop3->pass(get_option('mailserver_pass')); if (false === $count) - wp_die($pop3->ERROR); + wp_die(wp_specialchars($pop3->ERROR)); if (0 == $count) echo "

There doesn't seem to be any new mail.

\n"; // will fall-through to end of for loop @@ -171,7 +171,7 @@ for ($i=1; $i <= $count; $i++) : $post_data = add_magic_quotes($post_data); $post_ID = wp_insert_post($post_data); - if ( is_wp_error( $post_ID ) ) + if ( is_wp_error( $post_ID ) ) echo "\n" . $post_ID->get_error_message(); if (!$post_ID) {