* UW workaround improved, methinks.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@1196 7612ce4b-ef26-0410-bec9-ea0150e637f0

diff --git a/src/right_main.php b/src/right_main.php
index 5037fa01245574734795b1c9f5a0ff621adec2f2..5c69363c34361a73eec3e181bb023ec94029294f 100644 (file)
--- a/src/right_main.php
+++ b/src/right_main.php
@@ -81,7 +81,8 @@
    }
 
    // compensate for the UW vulnerability
-   if ($imap_server_type == 'uw' && strstr($mailbox, '/')) {
+   if ($imap_server_type == 'uw' && (strstr($mailbox, '../') ||
+                                     substr($mailbox, 0, 1) == '/')) {
       $mailbox = 'INBOX';
    }