Tickets :: Comment on [#4462] attachment.php sends mail to null address

* Your Email Address
* Spam protection	Enter the letters below: .__.. .. .._. __. \| \|\ /\| \| \| (__ \|__\ \/ \|/\\|_\|_.__)
Comment	> When a user does no have a properly configured profile (from_addr > field is missing), download notifications are sent to a null address. > > > > attachment.php calls getDefaultFromAddress() de > lib/Horde/Identity.php, wich returns Auth::GetAuth as email addr when > from_addr is empty. > > > > $addr = $this->getValue('from_addr'); > > if (empty($addr)) { > > $addr = Auth::getAuth(); > > } > > > > The problem (IMHO) with this is that Auth::getAuth returns an empty > value, because attachment.php is called anonymously. > > > > What do you think about inserting a check before the message is > sent?, just after this line in attachment.php: > > > > $mail_address = $mail_identity->getDefaultFromAddress(true); > >
Attachment
Watch this ticket