From e5b6a50e7004e857576f3f004a4ecb113d60348b Mon Sep 17 00:00:00 2001 From: pdontthink Date: Sun, 4 Oct 2009 21:00:28 +0000 Subject: [PATCH] If we add a token to lang_setup (#13855), need to check it in lang_change git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@13858 7612ce4b-ef26-0410-bec9-ea0150e637f0 --- plugins/squirrelspell/modules/lang_change.mod | 3 +++ 1 file changed, 3 insertions(+) diff --git a/plugins/squirrelspell/modules/lang_change.mod b/plugins/squirrelspell/modules/lang_change.mod index ef75fb5a..07031eba 100644 --- a/plugins/squirrelspell/modules/lang_change.mod +++ b/plugins/squirrelspell/modules/lang_change.mod @@ -16,6 +16,9 @@ * @subpackage squirrelspell */ +sqgetGlobalVar('smtoken', $submitted_token, SQ_POST, ''); +sm_validate_security_token($submitted_token, 3600, TRUE); + global $SQSPELL_APP_DEFAULT; if (! sqgetGlobalVar('use_langs',$use_langs,SQ_POST)) { -- 2.25.1