From deb72eb390ca9961a2de5b77fbda752c490a8ed0 Mon Sep 17 00:00:00 2001 From: Jeremy Felt Date: Wed, 11 Jan 2017 05:16:15 +0000 Subject: [PATCH] Mail: Disable wp-mail.php when `mailserver_url` is mail.example.com. Merges [39772] to the 4.4 branch. git-svn-id: https://develop.svn.wordpress.org/branches/4.4@39776 602fd350-edb4-49c9-b593-d223f7449a82 --- src/wp-mail.php | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/wp-mail.php b/src/wp-mail.php index 5efb57fcc1..60287a07bc 100644 --- a/src/wp-mail.php +++ b/src/wp-mail.php @@ -14,6 +14,12 @@ require(dirname(__FILE__) . '/wp-load.php'); if ( ! apply_filters( 'enable_post_by_email_configuration', true ) ) wp_die( __( 'This action has been disabled by the administrator.' ) ); +$mailserver_url = get_option( 'mailserver_url' ); + +if ( 'mail.example.com' === $mailserver_url || empty( $mailserver_url ) ) { + wp_die( __( 'This action has been disabled by the administrator.' ), 403 ); +} + /** * Fires to allow a plugin to do a complete takeover of Post by Email. *