diff options
| author | thomascube <thomas@roundcube.net> | 2007-11-25 17:34:19 +0000 |
|---|---|---|
| committer | thomascube <thomas@roundcube.net> | 2007-11-25 17:34:19 +0000 |
| commit | c5799618997716288169b6fbcd1251f76788cd49 (patch) | |
| tree | 79e74cc848f8b6322ff223b77e300bd4e2a854b4 /program/steps/mail/get.inc | |
| parent | 76b6bff70b3f7d8ff7eed261f7f9896cccae21f9 (diff) | |
Fixed some potential security risks + updatedd changelog
Diffstat (limited to 'program/steps/mail/get.inc')
| -rw-r--r-- | program/steps/mail/get.inc | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/program/steps/mail/get.inc b/program/steps/mail/get.inc index c9e40ac77..dad49d370 100644 --- a/program/steps/mail/get.inc +++ b/program/steps/mail/get.inc @@ -88,7 +88,7 @@ else if ($pid = get_input_value('_part', RCUBE_INPUT_GET)) // we have to analyze the whole structure again to find inline objects list($new_parts, $new_attachments) = rcmail_parse_message($MESSAGE['structure'], - array('safe' => (bool)$_GET['_safe'], + array('safe' => intval($_GET['_safe']), 'prefer_html' => TRUE, 'get_url' => $GET_URL.'&_part=%s')); @@ -102,7 +102,7 @@ else if ($pid = get_input_value('_part', RCUBE_INPUT_GET)) $part->body = $IMAP->get_message_part($MESSAGE['UID'], $part->mime_id, $part); $OUTPUT = new rcube_html_page(); - $OUTPUT->write(rcmail_print_body($part, (bool)$_GET['_safe'])); + $OUTPUT->write(rcmail_print_body($part, intval($_GET['_safe']))); } else { @@ -130,7 +130,7 @@ else $cont = ''; list($MESSAGE['parts']) = rcmail_parse_message($MESSAGE['structure'], - array('safe' => (bool)$_GET['_safe'], + array('safe' => intval($_GET['_safe']), 'get_url' => $GET_URL.'&_part=%s')); $cont = "<html>\n<head><title></title>\n</head>\n<body>"; |