From f830c8ed3e1a20bd9a4d8abf638a311294826ed3 Mon Sep 17 00:00:00 2001
From: pdontthink <pdontthink@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Date: Sat, 19 Sep 2009 20:22:15 +0000
Subject: [PATCH] Fix broken'Thread' and the no-javascript 'All' links (add
 security tokens)

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@13848 7612ce4b-ef26-0410-bec9-ea0150e637f0
---
 functions/mailbox_display.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/functions/mailbox_display.php b/functions/mailbox_display.php
index 130ed38c..d16679a4 100644
--- a/functions/mailbox_display.php
+++ b/functions/mailbox_display.php
@@ -975,7 +975,7 @@ function showMessagesForMailbox($imapConnection, &$aMailbox,$aProps, &$iError) {
         $source_url = $php_self;
     }
 
-    $baseurl = $source_url.'?mailbox=' . urlencode($aMailbox['NAME']) .'&amp;account='.$aMailbox['ACCOUNT'];
+    $baseurl = $source_url.'?mailbox=' . urlencode($aMailbox['NAME']) .'&amp;account='.$aMailbox['ACCOUNT'] . (strpos($source_url, 'src/search.php') ? '&amp;smtoken=' . sm_generate_security_token() : '');
     $where = urlencode($aMailbox['SEARCH'][$iSetIndx][0]);
     $what = urlencode($aMailbox['SEARCH'][$iSetIndx][1]);
     $baseurl .= '&amp;where=' . $where .  '&amp;what=' .  $what;
-- 
2.25.1