From 64550fa6c19245cc684278d382adfc80a89c05d8 Mon Sep 17 00:00:00 2001 From: Petr Skoda Date: Mon, 2 Jan 2012 22:36:37 +0100 Subject: [PATCH] MDL-13572 do not send emails to invalid addresses --- message/output/email/message_output_email.php | 1 + 1 file changed, 1 insertion(+) diff --git a/message/output/email/message_output_email.php b/message/output/email/message_output_email.php index f6c82ed00c6..c48e238a51d 100644 --- a/message/output/email/message_output_email.php +++ b/message/output/email/message_output_email.php @@ -51,6 +51,7 @@ class message_output_email extends message_output { //check if the recipient has a different email address specified in their messaging preferences Vs their user profile $emailmessagingpreference = get_user_preferences('message_processor_email_email', null, $eventdata->userto); + $emailmessagingpreference = clean_param($emailmessagingpreference, PARAM_EMAIL); if (!empty($emailmessagingpreference)) { //clone to avoid altering the actual user object $recipient = clone($eventdata->userto);