[Web] Remove invalid chars from sender for quota and quarantine notifications

master
andryyy 2019-09-15 09:52:13 +02:00
parent f9e7c6cf6a
commit 62a386f94e
No known key found for this signature in database
GPG Key ID: 8EC34FF2794E25EF
2 changed files with 7 additions and 2 deletions

View File

@ -298,7 +298,9 @@ function quarantine($_action, $_data = null) {
$max_size = $_data['max_size'];
$max_age = intval($_data['max_age']);
$subject = $_data['subject'];
$sender = $_data['sender'];
if (!filter_var($_data['sender'], FILTER_VALIDATE_EMAIL)) {
$sender = '';
}
$html = $_data['html_tmpl'];
if ($max_age <= 0) {
$max_age = 365;

View File

@ -21,7 +21,10 @@ function quota_notification($_action, $_data = null) {
$release_format = 'raw';
}
$subject = $_data['subject'];
$sender = $_data['sender'];
$sender = preg_replace('/[\x00-\x1F\x80-\xFF]/', '', $_data['sender']);
if (filter_var($sender, FILTER_VALIDATE_EMAIL) === false) {
$sender = '';
}
$html = $_data['html_tmpl'];
try {
$redis->Set('QW_SENDER', $sender);