Description: Mail: Disable wp-mail.php when `mailserver_url` is mail.example.com.
Author: jeremyfelt
Origin: upstream, https://github.com/WordPress/WordPress/commit/061e8788814ac87706d8b95688df276fe3c8596a
Bug-Debian: https://bugs.debian.org/851310
Applied-Upstream: 4.7.1
Reviewed-by: Craig Small <csmall@debian.org>
Last-Update: 2017-01-14
--- a/wp-mail.php
+++ b/wp-mail.php
@@ -14,6 +14,12 @@
 if ( ! apply_filters( 'enable_post_by_email_configuration', true ) )
 	wp_die( __( 'This action has been disabled by the administrator.' ) );
 
+$mailserver_url = get_option( 'mailserver_url' );
+
+if ( 'mail.example.com' === $mailserver_url || empty( $mailserver_url ) ) {
+       wp_die( __( 'This action has been disabled by the administrator.' ), 403 );
+}
+
 /**
  * Fires to allow a plugin to do a complete takeover of Post by Email.
  *
