From 2bb13169b4541d73b7d4623a02cc12ba2d50a611 Mon Sep 17 00:00:00 2001 From: logmanoriginal Date: Sat, 10 Nov 2018 18:42:36 +0100 Subject: [PATCH] [Configuration] Use FILTER_VALIDATE_EMAIL on admin/email This prevents including arbitrary data as email address. --- lib/Configuration.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lib/Configuration.php b/lib/Configuration.php index cbf393f9..a839fdc2 100644 --- a/lib/Configuration.php +++ b/lib/Configuration.php @@ -91,6 +91,10 @@ class Configuration { if(!is_string(self::getConfig('authentication', 'password'))) die('Parameter [authentication] => "password" is not a valid string! Please check "config.ini.php"!'); + if(!empty(self::getConfig('admin', 'email')) + && !filter_var(self::getConfig('admin', 'email'), FILTER_VALIDATE_EMAIL)) + die('Parameter [admin] => "email" is not a valid email address! Please check "config.ini.php"!'); + } public static function getConfig($category, $key) {