Admin Tools

#26906 PHPMailer 5.2.16 used by Admin Tools?

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by dlb on Monday, 16 January 2017 16:51 CST

Monday, 16 January 2017 13:42 CST

Boumy

Hi.
I notice that the e-mails notifications headers send to Joomla! Super Admin by Admin Tools contain the string

X-Mailer: PHPMailer 5.2.16 (https://github.com/PHPMailer/PHPMailer)

Is is normal? Safe ?

Thank you.

Monday, 16 January 2017 14:26 CST

dlb

Yes it uses PHPMailer, yes that is normal and yes it is safe. The bug in PHPMailer depends on having a mangled email address for the exploit to work. Joomla!'s internal functions sanitize the email address so the bug can't be exploited unless the extension author bypasses the safety features and calls PHPMailer directly. We do go through Joomla! so the email address is checked for validity and the bug can't be exploited.

Dale L. Brackin
Support Specialist

English: native

Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)

Monday, 16 January 2017 15:47 CST

Boumy

All right. Thank you very much.

Monday, 16 January 2017 16:51 CST

dlb

You're welcome!