On 2008-09-28 at 12:29 +0100, Andy Smith wrote:
>   thanks, I had checked if " is a valid character for an email address and I 
> dont think it is, but your solution is better as u never know who will break 
> the rules ;)

It is valid.  Left-hand sides can use double-quotes to expand the
available set of characters.

Valid email addresses (syntactically):
  [EMAIL PROTECTED]
  "fred bloggs"@example.org
  "  fred "@example.org
  ""@example.org
  a~`*&^%$#!._-={|}'/[EMAIL PROTECTED]
  ../etc/[EMAIL PROTECTED]
  `cat%20/etc/[EMAIL PROTECTED]
  "cat /etc/passwd | Mail -s w00t [EMAIL PROTECTED]"@example.org

And in homage to http://xkcd.com/327/ I offer:
  "phil'); DROP TABLE domains; DROP TABLE passwords; --"@example.org

So yes, ${quote_<lookup-type>:<string>} is rather important to use.

Regards,
"X'); DROP TABLE domains; DROP TABLE passwords; --"@spodhuis.org
 (yes, that address is valid and reaches me, and not via catchall)

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to