widget/contact: accept non-word characters in sender email addresses
authorMischa POSLAWSKY <perl@shiar.org>
Sun, 17 Nov 2019 13:51:08 +0000 (14:51 +0100)
committerMischa POSLAWSKY <perl@shiar.org>
Mon, 18 Nov 2019 17:30:28 +0000 (18:30 +0100)
Allow any remotely valid address, including <hans.verlinden@planet.nl>.

widget/contact.php

index ed0a0828140c7f875a7271d98075b31155b678a3..6e04005226abade032281e95fb36f750dfe8f521 100644 (file)
@@ -50,7 +50,7 @@ switch ($source) {
        }
 }
 
-       $reply = preg_match('/\A\w+@\w+\.[a-z]+\z/', @$input['email'])
+       $reply = preg_match('/\A[^\s\'@]{1,64}@[.a-zA-Z0-9-]{4,63}\z/', @$input['email'])
                ? $input['email'] : "noreply@$domain";
        $header = "From: $reply";