From 5dfb4b0b6faeab480be7b06bd1428aa0449ba23b Mon Sep 17 00:00:00 2001 From: graf25 Date: Fri, 29 Mar 2002 05:28:05 +0000 Subject: [PATCH] A quick-fix for the reported exploit with themes. git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@2645 7612ce4b-ef26-0410-bec9-ea0150e637f0 --- src/validate.php | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/validate.php b/src/validate.php index 60af3509..3d6d20e6 100644 --- a/src/validate.php +++ b/src/validate.php @@ -61,6 +61,15 @@ if (isset($send) * Include them down here instead of at the top so that all config * variables overwrite any passed in variables (for security). */ + +/** + * Reset the $theme() array in case a value was passed via a cookie. + * This is until theming is rewritten. + */ +global $theme; +unset($theme); +$theme=array(); + require_once('../config/config.php'); require_once('../src/load_prefs.php'); require_once('../functions/page_header.php'); -- 2.25.1