https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29046

--- Comment #30 from David Cook <[email protected]> ---
Comment on attachment 150125
  --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=150125
Bug 29046: Use EmailFieldPrecedence in first_valid_email_address

Review of attachment 150125:
 --> 
(https://bugs.koha-community.org/bugzilla3/page.cgi?id=splinter.html&bug=29046&attachment=150125)
-----------------------------------------------------------------

::: Koha/Patron.pm
@@ +1439,5 @@
> +
> +    my @fields = split /\s*\|\s*/,
> +      C4::Context->preference('EmailFieldPrecedence');
> +    for my $field (@fields) {
> +        $email = $self->$field;

You could crash Koha by putting junk into EmailFieldPrecedence.

I think either @fields should be validated or  $self->$field should be
validated.

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to