fix vulnerability in PHPMailer

17 years ago · 090ac2fea0
parent 11063ec65c
commit 090ac2fea0
1 changed files with 5 additions and 3 deletions
--- a/phpmailer/class.phpmailer.php
+++ b/phpmailer/class.phpmailer.php
@ -390,9 +390,11 @@ class PHPMailer
     */
    function SendmailSend($header, $body) {
        if ($this->Sender != "")
-            $sendmail = sprintf("%s -oi -f %s -t", $this->Sendmail, $this->Sender);
+            $sendmail = sprintf("%s -oi -f %s -t", 
+                escapeshellcmd($this->Sendmail), escapeshellarg($this->Sender));
        else
-            $sendmail = sprintf("%s -oi -t", $this->Sendmail);
+            $sendmail = sprintf("%s -oi -t", 
+                escapeshellcmd($this->Sendmail));

        if(!@$mail = popen($sendmail, "w"))
        {