From 7e6bff9bf696f683a8f8a65a642965a9b80de984 Mon Sep 17 00:00:00 2001 From: pdontthink Date: Mon, 17 Aug 2009 23:47:07 +0000 Subject: [PATCH] Delete requests can come via GET or POST git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@13829 7612ce4b-ef26-0410-bec9-ea0150e637f0 --- functions/mailbox_display.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/functions/mailbox_display.php b/functions/mailbox_display.php index 66cd62fe..130ed38c 100644 --- a/functions/mailbox_display.php +++ b/functions/mailbox_display.php @@ -1343,7 +1343,7 @@ function handleMessageListForm($imapConnection, &$aMailbox, $sButton='', // don't do anything to any messages until we have done security check // FIXME: not sure this code really belongs here, but there's nowhere else to put it with this architecture - sqgetGlobalVar('smtoken', $submitted_token, SQ_GET, ''); + sqgetGlobalVar('smtoken', $submitted_token, SQ_FORM, ''); sm_validate_security_token($submitted_token, 3600, TRUE); // make sure message UIDs are sanitized (BIGINT) -- 2.25.1