MDL-18348 CVE-2007-3215
This commit is contained in:
@@ -404,9 +404,9 @@ class PHPMailer
|
||||
*/
|
||||
function SendmailSend($header, $body) {
|
||||
if ($this->Sender != "")
|
||||
$sendmail = sprintf("%s -oi -f %s -t", $this->Sendmail, $this->Sender);
|
||||
$sendmail = sprintf("%s -oi -f %s -t", escapeshellcmd($this->Sendmail), escapeshellarg($this->Sender));
|
||||
else
|
||||
$sendmail = sprintf("%s -oi -t", $this->Sendmail);
|
||||
$sendmail = sprintf("%s -oi -t", escapeshellcmd($this->Sendmail));
|
||||
|
||||
if(!@$mail = popen($sendmail, "w"))
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user