2008 PHPMailer v1.7.2 Vunerability Patch

I'm in the process of upgrading 1.3.7 --> 1.3.8a.

I found change that I've made to **includes/classes/class.phpmailer.php

```
/* SA 08-08-07 PHPMailer vulnerability patch (old code commented below) ***/
function SendmailSend($header, $body) {
if ($this->Sender != "") {
$sendmail = sprintf("%s -oi -f %s -t", escapeshellcmd($this->Sendmail), escapeshellarg($this->Sender));
} else {
$sendmail = sprintf("%s -oi -t", escapeshellcmd($this->Sendmail));
}

/*
function SendmailSend($header, $body) {

if ($this->Sender != "")

$sendmail = sprintf("%s -oi -f %s -t", $this->Sendmail, $this->Sender);

else

$sendmail = sprintf("%s -oi -t", $this->Sendmail);

*/

I can't tell if the fix is in the newer version. 
Please someone let me know.

s.ali

That patch was incorporated in v1.3.7.1
In v1.3.8a you'll find it around line 408 of the file.