Commit Graph

92 Commits

Author SHA1 Message Date
Ilia Alshanetsky
86ca439a5d Fixed MOPB-34-2007:PHP mail() Header Injection Through Subject and To
Parameters
2007-03-30 00:28:58 +00:00
Antony Dovgal
b9bffbe019 fix compile warning 2007-03-27 09:20:27 +00:00
Ilia Alshanetsky
ae1c5674cb Fixed MOPB-33-2007:PHP mail() Message ASCIIZ Byte Truncation 2007-03-27 00:13:09 +00:00
Ilia Alshanetsky
094a5717b1 Eliminate strcat() and strcpy() 2007-01-25 00:26:51 +00:00
Sebastian Bergmann
4223aa4d5e MFH: Bump year. 2007-01-01 09:36:18 +00:00
foobar
5bd93221a8 bump year and license version 2006-01-01 12:51:34 +00:00
foobar
df5cfe27b4 - Fixed bug #29334 (mail() provides incorrect message time header) 2005-08-07 22:06:29 +00:00
foobar
23e671a51e - Bumber up year 2005-08-03 14:08:58 +00:00
Anantha Kesari H Y
83b5eb54c4 defined EX_OK and EX_TEMPFAIL in ext/standard/mail.c for NETWARE rather than including a sysexits.h.
-Kamesh
2005-07-28 09:41:34 +00:00
Anantha Kesari H Y
146cb29054 removing unwanted header files getting included 2004-09-25 14:48:44 +00:00
Antony Dovgal
cc39d06e4e fix typo in mail.c: mail_force_extra_parameters -> mail.force_extra_parameters 2004-08-03 06:25:25 +00:00
Ilia Alshanetsky
2736c55e3e Fixed bug #26847 (memory leak in mail() when to/subject contain only spaces) 2004-01-09 01:35:44 +00:00
Andi Gutmans
dbeb4158d2 - A belated happy holidays and PHP 5 2004-01-08 08:18:22 +00:00
Ilia Alshanetsky
d9edc99fbe MFB: Fix for possible uninitialized usage of subject_r. 2003-11-30 19:56:30 +00:00
Ilia Alshanetsky
21fceae7d6 Fixed bug #25923 (mail() modifies the to & subject arguments). 2003-10-20 14:22:01 +00:00
Ilia Alshanetsky
3158ff714e Remove sendmail patch check. 2003-10-13 04:15:09 +00:00
Ilia Alshanetsky
f3f3b772b2 Cleanup r1.76 patch 2003-09-11 04:46:10 +00:00
Ilia Alshanetsky
80fb9496b3 Re-enable sendmail binary check, now with parameter detection. 2003-09-08 20:15:35 +00:00
Stanislav Malyshev
90f7a474ac The sendmail_path executable check breaks setups that use parameters
for sendmail - including the default setup - so I'm disabling it for now.
2003-09-01 08:20:17 +00:00
Ilia Alshanetsky
32b5df0bc7 Prevent abrupt script execution when sendmail_path contains invalid
executable.
Add more detail to the warnings regarding execution of sendmail binary.
2003-08-27 23:53:15 +00:00
James Cox
f68c7ff249 updating license information in the headers. 2003-06-10 20:04:29 +00:00
Sara Golemon
13191aa841 Revert, this caused more trouble than it fixed. 2003-05-07 20:33:53 +00:00
Sara Golemon
48c947389e Bug #22962 2003-04-01 06:21:54 +00:00
Derick Rethans
424c41a72e - Added an extra ini setting with which extra commands can be forced to
the sendmail deamon on a per-vhost base. The value in this ini setting
  will override all extra commands passed as the 5th parameter to mail()
  and will work in Safe Mode.
@- Added an extra ini setting (mail_force_extra_paramaters) which forces
@  the addition of the specified parameters to be passed as extra
@  parameters to the sendmail binary. These parameters will always replace
@  the value of the 5th parameter to mail(), even in safe mode. (Derick)
2003-02-26 20:04:16 +00:00
Ilia Alshanetsky
4474f9225a Fixed bug #22355 (PHP would remove folding from Subject & To fields). 2003-02-24 19:41:18 +00:00
Sebastian Bergmann
b506f5c8f8 Bump year. 2002-12-31 16:08:15 +00:00
Martin Kraemer
c5a7a522a1 Portability: Use 0 if the platform does not define EX_OK 2002-11-28 08:23:36 +00:00
Sascha Schumann
2909e5c9c9 centralize #include "build-defs.h" and drop (sometimes inconsistent) other
instances
2002-10-24 13:15:49 +00:00
Derick Rethans
d52983dfab - Unbreak build 2002-09-22 16:23:44 +00:00
James Cox
b1b0230e6d typo 2002-09-22 16:14:11 +00:00
Derick Rethans
dc3ea09991 - Please do not use spaces for indentation!
- Removed redundend ifdefs
2002-09-06 07:30:51 +00:00
Anantha Kesari H Y
dc5d3f5585 NetWare related additions/modifications 2002-09-06 07:27:27 +00:00
Derick Rethans
fc7eb838fc - Whitespace 2002-08-26 09:47:46 +00:00
Derick Rethans
7edb660af9 @- Use escape_shell_cmd() to allow multiple extra parameters to the
@  invocation of the mailer as used in the fifth parameter to mail(). (Derick)
- Use escape_shell_cmd() to allow multiple extra parameters to the invocation
  of the mailer as used in the fifth parameter to mail().
2002-08-26 09:44:31 +00:00
Stefan Esser
3efb925931 Overwrite control chars in parameters with whitespace instead of truncating. 2002-08-24 11:37:50 +00:00
Marcus Boerger
149ad05b4f php_error_docref
#New conversion available at: http://docref.txt.marcus-boerger.de
2002-08-24 01:19:28 +00:00
Frank M. Kromann
8a7c339974 Add default arguments to new internal mail function. 2002-07-02 23:46:15 +00:00
Derick Rethans
f7cab95a7d - Be nice to users and allow them to check if the mail was send 2002-07-02 14:22:22 +00:00
Derick Rethans
0d61ab3814 - Disable 5th parameter to mail in safemode
@- Disabled the fifth parameter to the mail function in safemode. (Derick)
2002-07-02 13:56:47 +00:00
Stefan Esser
2eb859842b Fixed: possible bufferunderrun (worst case == invalid free bytes counter)
Fixed: isXXXX macros need (unsigned char) cast

Fixed: bug#17746 - control chars are now filtered within "to" and "subject" parameters
2002-06-13 18:54:45 +00:00
Markus Fischer
9b86cff931 - Adjust for improved error messages from win32/sendmail.c 2002-05-14 20:43:48 +00:00
Markus Fischer
ac50b53018 - WS fix. 2002-03-16 15:50:20 +00:00
Markus Fischer
3c52ef676f - Don't forget to close the handle. 2002-03-16 15:42:34 +00:00
Markus Fischer
d4e63bc5bf - Raise warning when trying to execute non-executeable shell
for mail delivery binary.
2002-03-16 12:45:43 +00:00
Sebastian Bergmann
90613d2282 Maintain headers. 2002-02-28 08:29:35 +00:00
Jon Parise
d299bdc5d9 Add a comment indicating that this return statement will never be reached.
# Perhaps it should just be removed?
2002-01-27 07:15:07 +00:00
Sebastian Bergmann
38933514e1 Update headers. 2001-12-11 15:32:16 +00:00
Hartmut Holzgraefe
34feef0d6b - switch to new paramter parser
- make sure To: and Subject: do not end with a newline character
2001-12-02 17:57:17 +00:00
Jeroen van Wolffelaar
6cfba2a3ea 2nd phase in back-substitution those macro's
I've got pretty much everything now...
2001-09-25 22:49:04 +00:00
Jeroen van Wolffelaar
c033288573 Back-substitute for Z_* macro's. If it breaks some extension (the script isn't optimal, it parses for example var->zval.value incorrect) please let me know. 2001-09-25 21:58:48 +00:00