From bc017c1d6c07ad907a5418bcbc1fb585311bc6c7 Mon Sep 17 00:00:00 2001
From: jangliss <jangliss@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Date: Fri, 17 Jun 2005 20:02:25 +0000
Subject: [PATCH] Fixed missing quote character when trying to build cid: urls.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9637 7612ce4b-ef26-0410-bec9-ea0150e637f0
---
 ChangeLog          | 1 +
 functions/mime.php | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/ChangeLog b/ChangeLog
index bfd744e7..338e40d4 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -369,6 +369,7 @@ Version 1.5.1 -- CVS
   - Security: fix several cross site scripting (XSS) attacks. Thanks go to
     Martijn Brinkers for finding a lot of these. [CAN-2005-1769]
   - Update COPYING with new address of the FSF.
+  - Fixed missing quote character when trying to build cid: urls.
 
 Version 1.5.0 - 2 February 2004
 -------------------------------
diff --git a/functions/mime.php b/functions/mime.php
index af426110..98acbd54 100644
--- a/functions/mime.php
+++ b/functions/mime.php
@@ -1683,7 +1683,7 @@ function sq_cid2http($message, $id, $cidurl, $mailbox){
          * If we couldn't generate a proper img url, drop in a blank image
          * instead of sending back empty, otherwise it causes unusual behaviour
          */
-        $httpurl = $quotchar . SM_PATH . 'images/blank.png';
+        $httpurl = $quotchar . SM_PATH . 'images/blank.png' . $quotchar;
     }
 
     return $httpurl;
@@ -2243,4 +2243,4 @@ function SendDownloadHeaders($type0, $type1, $filename, $force, $filesize=0) {
 
 }  // end fn SendDownloadHeaders
 
-?>
\ No newline at end of file
+?>
-- 
2.25.1