From:             bt at weberg dot de
Operating system: linux, debian
PHP version:      Irrelevant
PHP Bug Type:     Mail related
Bug description:  Addresses with "&" in it are not escaped!

Description:
------------
I thought that the addresses passed to sendmail where escaped. It seems
not to be. I have a problem with an email-receipient who gave me an
address with an "&" in it an I got an error from the local
shell-interpreter. The shell could not find the program...

Reproduce code:
---------------
Create a testscript with something like
<?php
  mail("test&[EMAIL PROTECTED]", "Error, or what?", "...");
?>

Expected result:
----------------
Sending the mail...

Actual result:
--------------
sh: line 1: [EMAIL PROTECTED]: command not found
can't close /usr/sbin/sendmail

-- 
Edit bug report at http://bugs.php.net/?id=28766&edit=1
-- 
Try a CVS snapshot (php4):  http://bugs.php.net/fix.php?id=28766&r=trysnapshot4
Try a CVS snapshot (php5):  http://bugs.php.net/fix.php?id=28766&r=trysnapshot5
Fixed in CVS:               http://bugs.php.net/fix.php?id=28766&r=fixedcvs
Fixed in release:           http://bugs.php.net/fix.php?id=28766&r=alreadyfixed
Need backtrace:             http://bugs.php.net/fix.php?id=28766&r=needtrace
Need Reproduce Script:      http://bugs.php.net/fix.php?id=28766&r=needscript
Try newer version:          http://bugs.php.net/fix.php?id=28766&r=oldversion
Not developer issue:        http://bugs.php.net/fix.php?id=28766&r=support
Expected behavior:          http://bugs.php.net/fix.php?id=28766&r=notwrong
Not enough info:            http://bugs.php.net/fix.php?id=28766&r=notenoughinfo
Submitted twice:            http://bugs.php.net/fix.php?id=28766&r=submittedtwice
register_globals:           http://bugs.php.net/fix.php?id=28766&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=28766&r=php3
Daylight Savings:           http://bugs.php.net/fix.php?id=28766&r=dst
IIS Stability:              http://bugs.php.net/fix.php?id=28766&r=isapi
Install GNU Sed:            http://bugs.php.net/fix.php?id=28766&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=28766&r=float

Reply via email to