diff options
author | Urban Müller | 2012-11-14 15:21:53 +0000 |
---|---|---|
committer | Urban Müller | 2012-11-14 15:21:53 +0000 |
commit | 2a53ba3b973e650bfc48688e7f87a9d4c4010f8e (patch) | |
tree | e5d3121096b4910f6a5506401671dda96d2f986c | |
parent | 1143249a29400c188914a5999fd1253e984264fe (diff) | |
download | itools-2a53ba3b973e650bfc48688e7f87a9d4c4010f8e.tar.gz itools-2a53ba3b973e650bfc48688e7f87a9d4c4010f8e.tar.bz2 itools-2a53ba3b973e650bfc48688e7f87a9d4c4010f8e.zip |
revert: mailer and mail client prevent arbitrary From:
-rw-r--r-- | it.class | 9 |
1 files changed, 1 insertions, 8 deletions
@@ -222,14 +222,7 @@ static function error($p = array(), $body = null, $to = null) # $body and $to de $body = it::replace(array('(pw|passw|password|secret)\] => .*' => '$1] => ********'), $body, array('utf8' => false)); } - it::mail(array( - 'From' => get_current_user() . "@" . gethostname(), - 'To' => $p['to'], - 'Subject' => substr($p['title'], 0, 160), - 'Body' => $body, - 'Cc' => $GLOBALS['it_defaultconfig']['error_cc'], - 'forcemail' => !it::is_devel() - )); + it::mail(array('To' => $p['to'], 'Subject' => substr($p['title'], 0, 160), 'Body' => $body, 'Cc' => $GLOBALS['it_defaultconfig']['error_cc'], 'forcemail' => !it::is_devel())); } else if ($_SERVER['REMOTE_ADDR']) # toscreen mode: web echo "<pre>" . htmlspecialchars($p['title'] . "\n" . rtrim($body), ENT_COMPAT, "iso-8859-1") . "</pre>"; # works with iso-8859-1 or utf-8, UTF8SAFE |