Refs #1290: Changed email addresses are checked in action:email/save

git-svn-id: http://code.elgg.org/elgg/trunk@3885 36083f99-b078-4883-b0ff-0f9b5a30f544

diff --git a/actions/email/save.php b/actions/email/save.php
index 006445b9901b61e5c612a843daaa926a8349d89b..7493538f97afa5dcfb2a753c0032d9e5fc196a25 100644 (file)
--- a/actions/email/save.php
+++ b/actions/email/save.php
@@ -22,6 +22,11 @@ if (!$user_id) {
        $user = get_entity($user_id);
 }
 
+if (!is_email_address($email)) {
+       register_error(elgg_echo('email:save:fail'));
+       forward($_SERVER['HTTP_REFERER']);
+}
+
 if ($user) {
        if (strcmp($email,$user->email)!=0) {
                if (!get_user_by_email($email)) {