From cdcaac70d5dbffdad8cf57b3db4c5ec1daa4ac5c Mon Sep 17 00:00:00 2001 From: lbergman Date: Mon, 15 Jan 2001 19:11:00 +0000 Subject: [PATCH] patch a security hole in UW git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@941 7612ce4b-ef26-0410-bec9-ea0150e637f0 --- src/right_main.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/right_main.php b/src/right_main.php index 955faf64..6f4d2149 100644 --- a/src/right_main.php +++ b/src/right_main.php @@ -79,6 +79,11 @@ $startMessage = 1; } + // compensate for the UW vulnerability + if ($imap_server_type == "uw" && strstr($mailbox, "../")) { + $mailbox = "INBOX"; + } + sqimap_mailbox_select($imapConnection, $mailbox); displayPageHeader($color, $mailbox); -- 2.25.1