Add PHP5-style constructor

[squirrelmail.git] / plugins / change_password / options.php

diff --git a/plugins/change_password/options.php b/plugins/change_password/options.php
index d4c8659aad3a6be7c692be843ee78cb349680a58..3e22bb3ddfd6c637f0e702d74993738246333a53 100644 (file)
--- a/plugins/change_password/options.php
+++ b/plugins/change_password/options.php
@@ -3,7 +3,7 @@
 /**
  * options.php - Change Password HTML page
  *
- * @copyright © 2004-2006 The SquirrelMail Project Team
+ * @copyright 2004-2016 The SquirrelMail Project Team
  * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  * @version $Id$
  * @package plugins
@@ -53,6 +53,11 @@ if (file_exists(SM_PATH . 'plugins/change_password/backend/'.$cpw_backend.'.php'
 
 /* the form was submitted, go for it */
 if(sqgetGlobalVar('cpw_go', $cpw_go, SQ_POST)) {
+
+    // security check
+    sqgetGlobalVar('smtoken', $submitted_token, SQ_POST, '');
+    sm_validate_security_token($submitted_token, -1, TRUE);
+
     /* perform basic checks */
     $Messages = cpw_check_input();
 
@@ -62,9 +67,9 @@ if(sqgetGlobalVar('cpw_go', $cpw_go, SQ_POST)) {
     }
 }
 
-displayPageHeader($color, 'None');
+displayPageHeader($color);
 
-do_hook('change_password_init');
+do_hook('change_password_init', $null);
 ?>
 
 <br />
@@ -76,13 +81,14 @@ do_hook('change_password_init');
 if (isset($Messages) && count($Messages) > 0) {
     echo "<tr><td>\n";
     foreach ($Messages as $line) {
-        echo htmlspecialchars($line) . "<br />\n";
+        echo sm_encode_html_special_chars($line) . "<br />\n";
     }
     echo "</td></tr>\n";
 }
 
 ?><tr><td>
     <?php echo addForm($_SERVER['PHP_SELF'], 'post'); ?>
+    <input type="hidden" name="smtoken" value="<?php echo sm_generate_security_token() ?>" />
     <table>
       <tr>
         <th align="right"><?php echo _("Current Password:")?></th>
@@ -104,4 +110,4 @@ if (isset($Messages) && count($Messages) > 0) {
     </form>
 </td></tr>
 </table>
-</body></html>
\ No newline at end of file
+</body></html>