#Bug 6401 Handle Backticks in sendmail

extension/qfq/qfq/report/SendMail.php

@@ -211,6 +211,7 @@ class SendMail {
 
         OnArray::arrayEscapeshellarg($args);
         $cmd = $sendEmail . ' ' . implode(' ', $args);
+        $cmd = str_replace('`', '\`', $cmd); // escape backticks (escapeshellcmd would be too thorough)
 
         exec($cmd, $arr, $rc);