Uploaded image for project: 'phpBB'
  1. phpBB
  2. PHPBB-7481

DNS lookup for e-mail validation will always succeed if a default domain with a wildcard is set

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • 3.0.2
    • 3.0.1
    • Other
    • None
    • PHP Environment: 5.2.6
      Database: 5.0.32

      A bug in includes/functions.php will cause all lookups to succeed if a domain with a wildcard (*.serverdomain.com) is configured as the default/search domain in the operating system configuration.

      As a result, a lookup for userdomain.com will return successful, as userdomain.com.serverdomain.com would be valid due to the wildcard. The wildcard configuration is not uncommon.

      This can be fixed easily without harm by suffixing a period (dot) to the end of the host as in the below code-snippet. Adding this dot ignores any default lookup domain.

          1. includes/functions.php ###

      else if (function_exists('checkdnsrr'))

      { return (checkdnsrr($host.'.', $type)) ? true : false; }

            Acyd Burn Meik Sievertsen [X] (Inactive)
            PhYrE2k PhYrE2k [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: