From: jangliss <jangliss@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Date: Fri, 17 Jun 2005 20:02:25 +0000 (+0000)
Subject: Fixed missing quote character when trying to build cid: urls.
X-Git-Url: https://vcs.fsf.org/?a=commitdiff_plain;h=bc017c1d6c07ad907a5418bcbc1fb585311bc6c7;p=squirrelmail.git

Fixed missing quote character when trying to build cid: urls.


git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9637 7612ce4b-ef26-0410-bec9-ea0150e637f0
---

diff --git a/ChangeLog b/ChangeLog
index bfd744e7..338e40d4 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -369,6 +369,7 @@ Version 1.5.1 -- CVS
   - Security: fix several cross site scripting (XSS) attacks. Thanks go to
     Martijn Brinkers for finding a lot of these. [CAN-2005-1769]
   - Update COPYING with new address of the FSF.
+  - Fixed missing quote character when trying to build cid: urls.
 
 Version 1.5.0 - 2 February 2004
 -------------------------------
diff --git a/functions/mime.php b/functions/mime.php
index af426110..98acbd54 100644
--- a/functions/mime.php
+++ b/functions/mime.php
@@ -1683,7 +1683,7 @@ function sq_cid2http($message, $id, $cidurl, $mailbox){
          * If we couldn't generate a proper img url, drop in a blank image
          * instead of sending back empty, otherwise it causes unusual behaviour
          */
-        $httpurl = $quotchar . SM_PATH . 'images/blank.png';
+        $httpurl = $quotchar . SM_PATH . 'images/blank.png' . $quotchar;
     }
 
     return $httpurl;
@@ -2243,4 +2243,4 @@ function SendDownloadHeaders($type0, $type1, $filename, $force, $filesize=0) {
 
 }  // end fn SendDownloadHeaders
 
-?>
\ No newline at end of file
+?>