Make WordPress Core

Ticket #40576: 40576.2.patch

File 40576.2.patch, 818 bytes (added by gk.loveweb, 9 years ago)
  • src/wp-includes/class-phpmailer.php

     src/wp-includes/class-phpmailer.php | 4 ++--
     1 file changed, 2 insertions(+), 2 deletions(-)
    
    diff --git a/src/wp-includes/class-phpmailer.php b/src/wp-includes/class-phpmailer.php
    index 7f5e353578..c3617b0cf3 100644
    a b class PHPMailer 
    13791379            }
    13801380        }
    13811381
    1382         // TODO: If possible, this should be changed to escapeshellarg.  Needs thorough testing.
    1383         $sendmail = sprintf($sendmailFmt, escapeshellcmd($this->Sendmail), $this->Sender);
     1382                // escapeshellarg() method escape string to be used as a shell argument.
     1383        $sendmail = sprintf($sendmailFmt, escapeshellarg($this->Sendmail), $this->Sender);
    13841384
    13851385        if ($this->SingleTo) {
    13861386            foreach ($this->SingleToArray as $toAddr) {