fix(security): fix host header injection in upload_audio, email header injection, add SSL verify to MTN curl
This commit is contained in:
@@ -278,6 +278,8 @@ function result($count)
|
||||
|
||||
function sendEmail($from,$to, $title, $body)
|
||||
{
|
||||
// Sanitize $from to prevent email header injection
|
||||
$from = str_replace(["\r", "\n", "\r\n"], '', $from);
|
||||
$header = "From: $from" . "\n" . "CC: $from";
|
||||
mail($to, $title, $body, $header);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user