diff options
| author | thomascube <thomas@roundcube.net> | 2007-02-16 19:35:03 +0000 |
|---|---|---|
| committer | thomascube <thomas@roundcube.net> | 2007-02-16 19:35:03 +0000 |
| commit | b3ce7915610a6d272cc38ecd2a8b61e04ee4aeae (patch) | |
| tree | 19456d201c65ccd4a305817a9ffbd0f477f11d49 /program/steps/settings/manage_folders.inc | |
| parent | 1012ea3946d7fb9c2b8d9598704d6ba64e8db218 (diff) | |
Better input checking on GET and POST vars
Diffstat (limited to 'program/steps/settings/manage_folders.inc')
| -rw-r--r-- | program/steps/settings/manage_folders.inc | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/program/steps/settings/manage_folders.inc b/program/steps/settings/manage_folders.inc index 8abd2c3b6..4759dd295 100644 --- a/program/steps/settings/manage_folders.inc +++ b/program/steps/settings/manage_folders.inc @@ -26,8 +26,8 @@ rcmail_imap_init(TRUE); // subscribe to one or more mailboxes if ($_action=='subscribe') { - if (strlen($_GET['_mboxes'])) - $IMAP->subscribe(array($_GET['_mboxes'])); + if ($mboxes = get_input_value('_mboxes', RCUBE_INPUT_GET)) + $IMAP->subscribe(array($mboxes)); if ($REMOTE_REQUEST) rcube_remote_response('// subscribed'); @@ -36,8 +36,8 @@ if ($_action=='subscribe') // unsubscribe one or more mailboxes else if ($_action=='unsubscribe') { - if (strlen($_GET['_mboxes'])) - $IMAP->unsubscribe(array($_GET['_mboxes'])); + if ($mboxes = get_input_value('_mboxes', RCUBE_INPUT_GET)) + $IMAP->unsubscribe(array($mboxes)); if ($REMOTE_REQUEST) rcube_remote_response('// unsubscribed'); @@ -95,8 +95,8 @@ else if ($_action=='rename-folder') // delete an existing IMAP mailbox else if ($_action=='delete-folder') { - if (!empty($_GET['_mboxes'])) - $deleted = $IMAP->delete_mailbox(array(get_input_value('_mboxes', RCUBE_INPUT_GET))); + if (get_input_value('_mboxes', RCUBE_INPUT_GET)) + $deleted = $IMAP->delete_mailbox(array($mboxes)); if ($REMOTE_REQUEST && $deleted) { |