From: Stanislav Malyshev <stas@php.net>
Date: Thu, 13 Sep 2007 20:08:00 +0000 (+0000)
Subject: register mail.force_extra_parameters change
X-Git-Tag: php-5.2.5RC1~156
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=03547dc13c68ab8dcc8b52a97db4832625161a13;p=php

register mail.force_extra_parameters change
---

diff --git a/NEWS b/NEWS
index 218dcc8cb7..8978d59f0f 100644
--- a/NEWS
+++ b/NEWS
@@ -16,6 +16,8 @@
 - Fixed imagerectangle regression with 1x1 rectangle (libgd #106). (Pierre)
 - Fixed PDO crash when dirver returns empty LOB stream (Stas).
 - Fixed dl() to accept only filenames - reported by Laurent Gaffie. (Stas)
+- Disallowed setting mail.force_extra_parameters from .htaccess due
+  to the security implications - reported by SecurityReason (Stas)
 
 - Fixed bug #42643 (CLI segfaults if using ATTR_PERSISTENT). (Ilia)
 - Fixed bug #42627 (bz2 extension fails to build with -fno-common).