Changeset 6212

Timestamp:

10/09/2007 10:15:37 PM (19 years ago)

Author:

markjaquith

Message:

Properly sanitize e-mail addresses in wp-mail.php. Props giannis1. fixes #5169 for trunk

File:

• trunk/wp-mail.php (modified) (1 diff)

trunk/wp-mail.php

@@ -64 +64 @@
                         // otherwise use the site admin
                         if (preg_match('/From: /', $line) | preg_match('/Reply-To: /', $line))  {
-                                $author=trim($line);
-                                if ( ereg("([a-zA-Z0-9\_\-\.]+@[\a-zA-z0-9\_\-\.]+)", $author , $regs) ) {
-                                        $author = $regs[1];
+                                $author = sanitize_email($line);
+                                if ( is_email($author) ) {
                                         echo "Author = {$author} <p>";
                                         $author = $wpdb->escape($author);