AliasHandler.php:

- escape $address in is_mailbox_alias()


git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@956 a1433add-5e2c-0410-b055-b7f2511e0802

model/AliasHandler.php

@@ -69,7 +69,8 @@ class AliasHandler {
         }
 
         $table_mailbox = table_by_key('mailbox');
-        $sql = "SELECT * FROM $table_mailbox WHERE username='$address'";
+        $E_address = escape_string($address);
+        $sql = "SELECT * FROM $table_mailbox WHERE username='$E_address'";
         $result = db_query($sql);
         if($result['rows'] != 1) {
            return false;