Fixed broken highlighting form (missing security tokens) (#3381117)

[squirrelmail.git] / src / empty_trash.php

diff --git a/src/empty_trash.php b/src/empty_trash.php
index a71dd7414a1631c87a143490ead7335d0b7535fc..2c52f8898663e56bd633beb56540b64bf3c84145 100644 (file)
--- a/src/empty_trash.php
+++ b/src/empty_trash.php
@@ -30,6 +30,10 @@ sqgetGlobalVar('delimiter', $delimiter, SQ_SESSION);
 
 /* finished globals */
 
+// first do a security check
+sqgetGlobalVar('smtoken', $submitted_token, SQ_GET, '');
+sm_validate_security_token($submitted_token, 3600, TRUE);
+
 $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, 0);
 
 $mailbox = $trash_folder;