diff --git a/ext/standard/mail.c b/ext/standard/mail.c
index 70c1d323be..fff0c53905 100644
--- a/ext/standard/mail.c
+++ b/ext/standard/mail.c
@@ -139,7 +139,7 @@ PHP_FUNCTION(mail)
 	}
 
 	if (force_extra_parameters) {
-		extra_cmd = estrdup(force_extra_parameters);
+		extra_cmd = php_escape_shell_cmd(force_extra_parameters);
 	} else if (extra_cmd) {
 		extra_cmd = php_escape_shell_cmd(extra_cmd);
 	}