* Added the !== false bit to the strstr so that even if the first three

  characters are ../, this would register a hit properly.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@1199 7612ce4b-ef26-0410-bec9-ea0150e637f0

diff --git a/src/right_main.php b/src/right_main.php
index 5c69363c34361a73eec3e181bb023ec94029294f..1f3873a4a94acc66ff50c505fcd73b0c1bd0ec39 100644 (file)
--- a/src/right_main.php
+++ b/src/right_main.php
@@ -81,7 +81,7 @@
    }
 
    // compensate for the UW vulnerability
-   if ($imap_server_type == 'uw' && (strstr($mailbox, '../') ||
+   if ($imap_server_type == 'uw' && (strstr($mailbox, '../') !== false ||
                                      substr($mailbox, 0, 1) == '/')) {
       $mailbox = 'INBOX';
    }