[Tickets #4462] NEW: attachment.php sends mail to null address

[bugs@bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=4462
-----------------------------------------------------------------------
 Ticket             | 4462
 Created By         | srrafa at usc.es
 Summary            | attachment.php sends mail to null address
 Queue              | IMP
 Version            | HEAD
 Type               | Bug
 State              | Unconfirmed
 Priority           | 1. Low
 Owners             | 
-----------------------------------------------------------------------


srrafa at usc.es (2006-09-25 06:00) wrote:

When a user does no have a properly configured profile (from_addr field is
missing), download notifications are sent to a null address.

attachment.php calls getDefaultFromAddress() de lib/Horde/Identity.php,
wich returns Auth::GetAuth as email addr when from_addr is empty.

        $addr = $this->getValue('from_addr');
        if (empty($addr)) {
            $addr = Auth::getAuth();
        }

The problem (IMHO) with this is that Auth::getAuth returns an empty value,
because attachment.php is called anonymously.

What do you think about inserting a check before the message is sent?,
just after this line in attachment.php:

$mail_address = $mail_identity->getDefaultFromAddress(true);