MDL-18348 CVE-2007-3215

This commit is contained in:
skodak
2009-02-23 07:48:05 +00:00
parent 85fcc67e01
commit 290f9067d0
+2 -2
View File
@@ -404,9 +404,9 @@ class PHPMailer
*/
function SendmailSend($header, $body) {
if ($this->Sender != "")
$sendmail = sprintf("%s -oi -f %s -t", $this->Sendmail, $this->Sender);
$sendmail = sprintf("%s -oi -f %s -t", escapeshellcmd($this->Sendmail), escapeshellarg($this->Sender));
else
$sendmail = sprintf("%s -oi -t", $this->Sendmail);
$sendmail = sprintf("%s -oi -t", escapeshellcmd($this->Sendmail));
if(!@$mail = popen($sendmail, "w"))
{