From 9d99e49d92f0adcdcafe779a9dade23ec9fba288 Mon Sep 17 00:00:00 2001 From: fidian Date: Fri, 16 Mar 2001 15:44:35 +0000 Subject: [PATCH] * Added the !== false bit to the strstr so that even if the first three characters are ../, this would register a hit properly. git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@1199 7612ce4b-ef26-0410-bec9-ea0150e637f0 --- src/right_main.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/right_main.php b/src/right_main.php index 5c69363c..1f3873a4 100644 --- a/src/right_main.php +++ b/src/right_main.php @@ -81,7 +81,7 @@ } // compensate for the UW vulnerability - if ($imap_server_type == 'uw' && (strstr($mailbox, '../') || + if ($imap_server_type == 'uw' && (strstr($mailbox, '../') !== false || substr($mailbox, 0, 1) == '/')) { $mailbox = 'INBOX'; } -- 2.25.1