Synced mail function in mb_send_mail function(Escape mail.force_extra_parameters value).

19 years ago · e206802652
1 changed files with 1 additions and 1 deletions
--- a/ext/mbstring/mbstring.c
+++ b/ext/mbstring/mbstring.c
@ -3770,7 +3770,7 @@ PHP_FUNCTION(mb_send_mail)
 	headers = (char *)device.buffer;

 	if (force_extra_parameters) {
-		extra_cmd = estrdup(force_extra_parameters);
+		extra_cmd = php_escape_shell_cmd(force_extra_parameters);
 	} else if (extra_cmd) {
 		extra_cmd = php_escape_shell_cmd(extra_cmd);
 	}