Don't show fake address - phishing prevention (#1488981)

Aleksander Machniak

2013-03-12 ff7542bfb9648a8970bd6ff767bb62a647f705ad

 program/steps/mail/func.inc

@@ -1444,6 +1444,11 @@
    $mailto = $part['mailto'];
    $string = $part['string'];

    // phishing email prevention (#1488981), e.g. "valid@email.addr <phishing@email.addr>"
    if ($name && $name != $mailto && strpos($name, '@')) {
      $name = '';
    }

    // IDNA ASCII to Unicode
    if ($name == $mailto)
      $name = rcube_idn_to_utf8($name);