X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=src%2Ffolders_delete.php;h=3b450048b322f0e8022d9e36c349a011ef9d139d;hb=dcc1cc825e550711d0207a737f9ea3ac2b38e923;hp=58e6fe2c89a2544b129298facdebd911a6c439f3;hpb=1e12d1ffb4f54350932a17397d38917db21d64df;p=squirrelmail.git

diff --git a/src/folders_delete.php b/src/folders_delete.php
index 58e6fe2c..3b450048 100644
--- a/src/folders_delete.php
+++ b/src/folders_delete.php
@@ -10,13 +10,15 @@
  * Called from the folders.php
  *
  * $Id$
+ * @package squirrelmail
  */
 
-/* Path for SquirrelMail required files. */
+/** Path for SquirrelMail required files. */
 define('SM_PATH','../');
 
 /* SquirrelMail required files. */
 require_once(SM_PATH . 'include/validate.php');
+require_once(SM_PATH . 'functions/global.php');
 require_once(SM_PATH . 'functions/imap.php');
 require_once(SM_PATH . 'functions/tree.php');
 require_once(SM_PATH . 'functions/display_messages.php');
@@ -62,7 +64,7 @@ if( !sqgetGlobalVar('confirmed', $tmp, SQ_POST) ) {
         sprintf(_("Are you sure you want to delete %s?"), imap_utf7_decode_local($mailbox)).
         '<FORM ACTION="folders_delete.php" METHOD="POST"><p>'.
 
-        '<INPUT TYPE=HIDDEN NAME="mailbox" VALUE="'.$mailbox."\">\n" .
+        '<INPUT TYPE=HIDDEN NAME="mailbox" VALUE="' . htmlspecialchars($mailbox) . "\">\n" .
         '<INPUT TYPE=SUBMIT NAME="confirmed" VALUE="'._("Yes")."\">\n".
         '<INPUT TYPE=SUBMIT NAME="backingout" VALUE="'._("No")."\">\n".
         '</p></FORM><BR></td></tr></table>';