wp-mail quote escaping fix from majelbstoat. fixes WordPress#2209

ryanboren · ryanboren · commit 852e4073b76f · 2006-01-23T23:49:22.000Z
git-svn-id: https://develop.svn.wordpress.org/trunk@3475 602fd350-edb4-49c9-b593-d223f7449a82
diff --git a/wp-mail.php b/wp-mail.php
@@ -61,8 +61,10 @@
 			if (preg_match('/From: /', $line) | preg_match('Reply-To: /', $line))  {
 				$author=trim($line);
 			if ( ereg("([a-zA-Z0-9\_\-\.]+@[\a-zA-z0-9\_\-\.]+)", $author , $regs) ) {
-				echo "Author = {$regs[1]} <p>";
-				$result = $wpdb->get_row("SELECT ID FROM $tableusers WHERE user_email='$regs[1]' ORDER BY ID DESC LIMIT 1");
+				$author = $regs[1];
+				echo "Author = {$author} <p>";
+				$author = $wpdb->escape($author);
+				$result = $wpdb->get_row("SELECT ID FROM $wpdb->users WHERE user_email='$author' LIMIT 1");
 				if (!$result)
 					$post_author = 1;
 				else
