Changeset 226

Timestamp:

Jan 10, 2007 4:57:15 AM (17 years ago)

Author:

quinn

Message:

Q - Email.inc.php - removed final_headers from mail header injection detection.

File:

• tags/2.0.2/lib/Email.inc.php (modified) (1 diff)

tags/2.0.2/lib/Email.inc.php

@@ -271 +271 @@
 
         // Check for mail header injection attacks.
-        $full_mail_content = join("\n", array($final_to, $this->_params['subject'], $final_body, $final_headers, $envelope_sender_header));
+        $full_mail_content = join("\n", array($final_to, $this->_params['subject'], $final_body));
         if (preg_match("/(Content-Type:|MIME-Version:|Content-Transfer-Encoding:|[\n\r]Bcc:|[\n\r]Cc:)/i", $full_mail_content)) {
             App::logMsg(sprintf('Mail header injection attack in content: %s', $full_mail_content), LOG_WARNING, __FILE__, __LINE__);