Fix for SquirrelSpell output issues. Patch courtesy David Boone.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@8248 7612ce4b-ef26-0410-bec9-ea0150e637f0

diff --git a/ChangeLog b/ChangeLog
index a80d895cc981871bc12426de64d7f44ecf9b2a98..20d770d465e56ed55a4ee8e07bfdf4f57a545f43 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -135,6 +135,7 @@ Version 1.5.1 -- CVS
   - Fixed XSS exploit in decodeHeader function.
   - Added site configuration and custom translation engine support to translate 
     plugin.
   - Fixed XSS exploit in decodeHeader function.
   - Added site configuration and custom translation engine support to translate 
     plugin.

+  - Fixed SquirrelSpell error output.  Patch courtesy David Boone.

 
 Version 1.5.0
 --------------------
 
 Version 1.5.0
 --------------------

diff --git a/plugins/squirrelspell/modules/check_me.mod b/plugins/squirrelspell/modules/check_me.mod
index a77958f46d05472cd53ba600fb0c0f32aafc6b11..288ac4f6ca0ba74fbf38557b905acd31e57b48cf 100644 (file)
--- a/plugins/squirrelspell/modules/check_me.mod
+++ b/plugins/squirrelspell/modules/check_me.mod
@@ -120,7 +120,7 @@ if ($sqspell_exitcode){
   $msg= "<div align='center'>"
      . sprintf(_("I tried to execute '%s', but it returned:"),
                $sqspell_command) . "<pre>"
   $msg= "<div align='center'>"
      . sprintf(_("I tried to execute '%s', but it returned:"),
                $sqspell_command) . "<pre>"

-     . join("\n", htmlspecialchars($sqspell_output)) . "</pre>"
+     . htmlspecialchars(join("\n", $sqspell_output)) . '</pre>'

      . '<form onsubmit="return false">'
      . '<input type="submit" value="  ' . _("Close")
      . '  " onclick="self.close()" /></form></div>';
      . '<form onsubmit="return false">'
      . '<input type="submit" value="  ' . _("Close")
      . '  " onclick="self.close()" /></form></div>';