Difference between revisions of "Postie Plugin"

Latest revision as of 14:21, 25 October 2012

Back to the TOC

As Oct. 2012 the Postie Plugin required the following change in postie_getmail.php

if(preg_match("@((%3C|<)/?script|<meta|document\.|\.cookie|\.createElement|onload\s*=|(eval|base64)\()@is",$email)){
	echo "possible XSS attack - ignoring email\n";
	continue;
}