bug 1019: Do not allow logged in users to spam someone else
authorMichael Tänzer <neo@nhng.de>
Tue, 22 May 2012 22:45:43 +0000 (00:45 +0200)
committerMichael Tänzer <neo@nhng.de>
Tue, 22 May 2012 22:45:43 +0000 (00:45 +0200)
Signed-off-by: Michael Tänzer <neo@nhng.de>
www/account.php

index d1dd695..0b32c2c 100644 (file)
@@ -47,7 +47,7 @@
 
                 $message = "From: $who\nEmail: $email\nSubject: $subject\n\nMessage:\n".$message;
 
-                sendmail("cacert-support@lists.cacert.org, $email", "[website form email]: ".$subject, $message, "website-form@cacert.org", "cacert-support@lists.cacert.org, $email", "", "CAcert Website");
+                sendmail("cacert-support@lists.cacert.org", "[website form email]: ".$subject, $message, "website-form@cacert.org", "cacert-support@lists.cacert.org, $email", "", "CAcert Website");
                
                 showheader(_("Welcome to CAcert.org"));
                 echo _("Your message has been sent to the general support list.");