fix(security): fix host header injection in upload_audio, email header injection, add SSL verify to MTN curl

This commit is contained in:
Hamza-Ayed
2026-06-17 06:57:56 +03:00
parent 75aeb73f27
commit 70c06edd71
4 changed files with 9 additions and 4 deletions

View File

@@ -278,6 +278,8 @@ function result($count)
function sendEmail($from,$to, $title, $body)
{
// Sanitize $from to prevent email header injection
$from = str_replace(["\r", "\n", "\r\n"], '', $from);
$header = "From: $from" . "\n" . "CC: $from";
mail($to, $title, $body, $header);
}