Update Swiftmailer to avoid potential security risk

digitecpl · Jan 6, 2017 · febb9ad · febb9ad
1 parent f2a24fb
commit febb9ad
Show file tree

Hide file tree

Showing 4 changed files with 66 additions and 54 deletions.
diff --git a/app/Core/Mail/Transport/Mail.php b/app/Core/Mail/Transport/Mail.php
@@ -33,8 +33,8 @@ public function sendEmail($email, $name, $subject, $html, $author)
             $message = Swift_Message::newInstance()
                 ->setSubject($subject)
                 ->setFrom(array($this->helper->mail->getMailSenderAddress() => $author))
-                ->setBody($html, 'text/html')
-                ->setTo(array($email => $name));
+                ->setTo(array($email => $name))
+                ->setBody($html, 'text/html');
 
             Swift_Mailer::newInstance($this->getTransport())->send($message);
         } catch (Swift_TransportException $e) {

diff --git a/app/Core/Mail/Transport/Smtp.php b/app/Core/Mail/Transport/Smtp.php
@@ -24,6 +24,7 @@ protected function getTransport()
         $transport->setUsername(MAIL_SMTP_USERNAME);
         $transport->setPassword(MAIL_SMTP_PASSWORD);
         $transport->setEncryption(MAIL_SMTP_ENCRYPTION);
+
         if (HTTP_VERIFY_SSL_CERTIFICATE === false) {
             $transport->setStreamOptions(array(
                 'ssl' => array(

diff --git a/composer.json b/composer.json
@@ -35,7 +35,7 @@
         "paragonie/random_compat": "2.0.2",
         "pimple/pimple" : "3.0.2",
         "ramsey/array_column": "1.1.3",
-        "swiftmailer/swiftmailer" : "5.4.2",
+        "swiftmailer/swiftmailer" : "5.4.5",
         "symfony/console" : "2.8.7",
         "symfony/event-dispatcher" : "2.7.14",
         "gregwar/captcha": "1.1.1"

diff --git a/composer.lock b/composer.lock