From 8b043727801e26a9d8d7ee190874ea2a3027fb5a Mon Sep 17 00:00:00 2001
From: kink <kink@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Date: Thu, 26 Sep 2002 08:38:50 +0000
Subject: [PATCH] Do not use mixed get/post variables because this breaks some
 browers.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@3743 7612ce4b-ef26-0410-bec9-ea0150e637f0
---
 functions/mailbox_display.php |  9 ++++-----
 src/move_messages.php         | 11 ++++-------
 2 files changed, 8 insertions(+), 12 deletions(-)

diff --git a/functions/mailbox_display.php b/functions/mailbox_display.php
index fa5c3b6a..b007c0ac 100644
--- a/functions/mailbox_display.php
+++ b/functions/mailbox_display.php
@@ -677,11 +677,9 @@ function mail_message_listing_beginning ($imapConnection,
      $source_url = $PHP_SELF;
   }
 
-  if (!isset($msg)) {
-     $msg = '';
-  }
-  $moveURL = "move_messages.php?msg=$msg&amp;mailbox=$urlMailbox"
-    . "&amp;startMessage=$start_msg";
+  $moveURL = 'move_messages.php';
+  $moveFields = '<input type="hidden" name="mailbox" value="'.$urlMailbox.'">'.
+                '<input type="hidden" name="startMessage" value="'.$start_msg.'">';
 
   /*
    * This is the beginning of the message list table.
@@ -689,6 +687,7 @@ function mail_message_listing_beginning ($imapConnection,
    */
 
     echo "<FORM name=\"messageList\" method=post action=\"$moveURL\">\n"
+        . $moveFields
         . html_tag( 'table' ,'' , '', '', 'border="0" width="100%" cellpadding="1"  cellspacing="0"' ) .
             html_tag( 'tr',
                 html_tag( 'td' ,
diff --git a/src/move_messages.php b/src/move_messages.php
index d43c3b10..65df6178 100644
--- a/src/move_messages.php
+++ b/src/move_messages.php
@@ -119,11 +119,11 @@ $onetimepad = $_SESSION['onetimepad'];
 $base_uri = $_SESSION['base_uri'];
 $delimiter = $_SESSION['delimiter'];
 
-if (isset($_GET['mailbox'])) {
-    $mailbox = $_GET['mailbox'];
+if (isset($_POST['mailbox'])) {
+    $mailbox = $_POST['mailbox'];
 }
-if (isset($_GET['startMessage'])) {
-    $startMessage = $_GET['startMessage'];
+if (isset($_POST['startMessage'])) {
+    $startMessage = $_POST['startMessage'];
 }
 if (isset($_POST['moveButton'])) {
     $moveButton = $_POST['moveButton'];
@@ -131,9 +131,6 @@ if (isset($_POST['moveButton'])) {
 if (isset($_POST['msg'])) {
     $msg = $_POST['msg'];
 }
-elseif (isset($_GET['msg'])) {
-    $msg = $_GET['msg'];
-}
 if (isset($_POST['expungeButton'])) {
     $expungeButton = $_POST['expungeButton'];
 }
-- 
2.25.1