report a bug |  advanced search |  statistics |  developer log in/out
Bug #12 Invalid email addresses subscribed
Submitted: 2010-10-07 01:28 UTC Modified: 2011-03-11 00:45 UTC
Votes:1
Avg. Score:1.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: maintainer at mlmmj dot org Assigned:
Status: Open
Mlmmj Version: 1.2.17 OS:
MTA: MTA Version:
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes. If this is not your bug, you can add a comment by following this link. If this is your bug, but you forgot your password, you can retrieve your password here.
Password:

 

 [2010-10-07 01:28 UTC] maintainer at mlmmj dot org
Description:
------------
Mlmmj accepts too much for its commandline arguments at times. E.g. using mlmmj-sub a carriage return can be accepted at the end of an email address and be subscribed.

Test script:
---------------
$_REQUEST['address'] comes from a textarea:

$addressA = explode("\n", $_REQUEST['address']);
foreach ($addressA as $a) {
   exec("sudo /usr/bin/mlmmj-sub -L /var/spool/mlmmj/listname/ -a {$a} -s");
}


Expected result:
----------------
Either a sanitised address subscribed to the list, or more probably, an error from Mlmmj that the address is invalid.

Actual result:
--------------
Addresses are subscribed with carriage returns in them that are then difficult to remove!