171 |
172 | Other contributions are gladly received, whether in beer 🍺, T-shirts 👕, Amazon wishlist raids, or cold, hard cash 💰.
173 |
174 | ## Changelog
175 |
176 | See [changelog](changelog.md).
177 |
178 | ## History
179 | - PHPMailer was originally written in 2001 by Brent R. Matzelle as a [SourceForge project](http://sourceforge.net/projects/phpmailer/).
180 | - Marcus Bointon (coolbru on SF) and Andy Prevost (codeworxtech) took over the project in 2004.
181 | - Became an Apache incubator project on Google Code in 2010, managed by Jim Jagielski.
182 | - Marcus created his fork on [GitHub](https://github.com/Synchro/PHPMailer).
183 | - Jim and Marcus decide to join forces and use GitHub as the canonical and official repo for PHPMailer.
184 | - PHPMailer moves to the [PHPMailer organisation](https://github.com/PHPMailer) on GitHub.
185 |
186 | ### What's changed since moving from SourceForge?
187 | - Official successor to the SourceForge and Google Code projects.
188 | - Test suite.
189 | - Continuous integration with Travis-CI.
190 | - Composer support.
191 | - Public development.
192 | - Additional languages and language strings.
193 | - CRAM-MD5 authentication support.
194 | - Preserves full repo history of authors, commits and branches from the original SourceForge project.
195 |
--------------------------------------------------------------------------------
/mailer/SECURITY:
--------------------------------------------------------------------------------
1 | # Security notices relating to PHPMailer
2 |
3 | Please disclose any vulnerabilities found responsibly - report any security problems found to the maintainers privately.
4 |
5 | PHPMailer versions prior to 5.2.14 (released November 2015) are vulnerable to [CVE-2015-8476](https://web.nvd.nist.gov/view/vuln/detail?vulnId=) an SMTP CRLF injection bug permitting arbitrary message sending.
6 |
7 | PHPMailer versions prior to 5.2.10 (released May 2015) are vulnerable to [CVE-2008-5619](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5619), a remote code execution vulnerability in the bundled html2text library. This file was removed in 5.2.10, so if you are using a version prior to that and make use of the html2text function, it's vitally important that you upgrade and remove this file.
8 |
9 | PHPMailer versions prior to 2.0.7 and 2.2.1 are vulnerable to [CVE-2012-0796](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0796), an email header injection attack.
10 |
11 | Joomla 1.6.0 uses PHPMailer in an unsafe way, allowing it to reveal local file paths, reported in [CVE-2011-3747](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3747).
12 |
13 | PHPMailer didn't sanitise the `$lang_path` parameter in `SetLanguage`. This wasn't a problem in itself, but some apps (PHPClassifieds, ATutor) also failed to sanitise user-provided parameters passed to it, permitting semi-arbitrary local file inclusion, reported in [CVE-2010-4914](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4914), [CVE-2007-2021](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-2021) and [CVE-2006-5734](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-5734).
14 |
15 | PHPMailer 1.7.2 and earlier contained a possible DDoS vulnerability reported in [CVE-2005-1807](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-1807).
16 |
17 | PHPMailer 1.7 and earlier (June 2003) have a possible vulnerability in the `SendmailSend` method where shell commands may not be sanitised. Reported in [CVE-2007-3215](https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-3215).
18 |
19 |
--------------------------------------------------------------------------------
/mailer/VERSION:
--------------------------------------------------------------------------------
1 | 5.2.16
--------------------------------------------------------------------------------
/mailer/class.phpmaileroauth.php:
--------------------------------------------------------------------------------
1 |
8 | * @author Jim Jagielski (jimjag) ';
373 | foreach ($this->errors as $error) {
374 | print_r($error);
375 | }
376 | echo '';
377 | }
378 | }
379 |
380 | /**
381 | * Get an array of error messages, if any.
382 | * @return array
383 | */
384 | public function getErrors()
385 | {
386 | return $this->errors;
387 | }
388 |
389 | /**
390 | * POP3 connection error handler.
391 | * @param integer $errno
392 | * @param string $errstr
393 | * @param string $errfile
394 | * @param integer $errline
395 | * @access protected
396 | */
397 | protected function catchWarning($errno, $errstr, $errfile, $errline)
398 | {
399 | $this->setError(array(
400 | 'error' => "Connecting to the POP3 server raised a PHP warning: ",
401 | 'errno' => $errno,
402 | 'errstr' => $errstr,
403 | 'errfile' => $errfile,
404 | 'errline' => $errline
405 | ));
406 | }
407 | }
408 |
--------------------------------------------------------------------------------
/mailer/composer.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "phpmailer/phpmailer",
3 | "type": "library",
4 | "description": "PHPMailer is a full-featured email creation and transfer class for PHP",
5 | "authors": [
6 | {
7 | "name": "Marcus Bointon",
8 | "email": "phpmailer@synchromedia.co.uk"
9 | },
10 | {
11 | "name": "Jim Jagielski",
12 | "email": "jimjag@gmail.com"
13 | },
14 | {
15 | "name": "Andy Prevost",
16 | "email": "codeworxtech@users.sourceforge.net"
17 | },
18 | {
19 | "name": "Brent R. Matzelle"
20 | }
21 | ],
22 | "require": {
23 | "php": ">=5.0.0"
24 | },
25 | "require-dev": {
26 | "phpdocumentor/phpdocumentor": "*",
27 | "phpunit/phpunit": "4.7.*"
28 | },
29 | "suggest": {
30 | "league/oauth2-google": "Needed for Google XOAUTH2 authentication"
31 | },
32 | "autoload": {
33 | "classmap": [
34 | "class.phpmailer.php",
35 | "class.phpmaileroauth.php",
36 | "class.phpmaileroauthgoogle.php",
37 | "class.smtp.php",
38 | "class.pop3.php",
39 | "extras/EasyPeasyICS.php",
40 | "extras/ntlm_sasl_client.php"
41 | ]
42 | },
43 | "license": "LGPL-2.1"
44 | }
45 |
--------------------------------------------------------------------------------
/mailer/extras/EasyPeasyICS.php:
--------------------------------------------------------------------------------
1 |
5 | * @author Manuel Reinhard