Navigation

wp-mail.php

Timestamp:

03/07/06 01:47:45 (3 years ago)

Author:

ryan

Message:

Security back ports from masquerade and MarkJaquith?.

Files:

r2196	r3627
51	51	$subject = trim($line);
52	52	$subject = substr($subject, 9, strlen($subject)-9);
53		if (!preg_match('#\=\?(.+)\?Q\?(.+)\?\=#i', $subject)) {
54		$subject = wp_iso_descrambler($subject);
55		}
	53	$subject = wp_iso_descrambler($subject);
56	54	// Captures any text in the subject before $phone_delim as the subject
57	55	$subject = explode($phone_delim, $subject);
…	…
64	62	$author=trim($line);
65	63	if ( ereg("([a-zA-Z0-9\_\-\.]+@[\a-zA-z0-9\_\-\.]+)", $author , $regs) ) {
66		echo "Author = {$regs[1]} <p>";
67		$result = $wpdb->get_row("SELECT ID FROM $tableusers WHERE user_email='$regs[1]' ORDER BY ID DESC LIMIT 1");
	64	$author = $regs[1];
	65	echo "Author = {$author} <p>";
	66	$author = $wpdb->escape($author);
	67	$result = $wpdb->get_row("SELECT ID FROM $wpdb->users WHERE user_email='$author' LIMIT 1");
68	68	if (!$result)
69	69	$post_author = 1;
…	…
82	82	$date_arr = explode(' ', $ddate);
83	83	$date_time = explode(':', $date_arr[3]);
84
	84
85	85	$ddate_H = $date_time[0];
86	86	$ddate_i = $date_time[1];
87	87	$ddate_s = $date_time[2];
88
	88
89	89	$ddate_m = $date_arr[1];
90	90	$ddate_d = $date_arr[0];
…	…
137	137
138	138	$post_data = compact('post_content','post_title','post_date','post_date_gmt','post_author','post_category', 'post_status');
	139	$post_data = add_magic_quotes($post_data);
139	140
140	141	$post_ID = wp_insert_post($post_data);