sort and startMessage were being set from $_GET without checking to make sure they...

[squirrelmail.git] / src / delete_message.php

diff --git a/src/delete_message.php b/src/delete_message.php
index fc281fdd479130b13158b9b9bf8cbe2fea101e6f..7fc5473d93049dc2d7e54772193121ca623a021a 100644 (file)
--- a/src/delete_message.php
+++ b/src/delete_message.php
@@ -32,8 +32,13 @@ if (isset($_GET['saved_draft'])) {
 if (isset($_GET['mail_sent'])) {
     $mail_sent = urlencode($_GET['mail_sent']);
 }
-$sort = (int) $_GET['sort'];
-$startMessage = (int) $_GET['startMessage'];
+if (isset($_GET['sort'])) {
+       $sort = (int) $_GET['sort'];
+}
+
+if (isset($_GET['startMessage'])) {
+       $startMessage = (int) $_GET['startMessage'];
+}
 
 if(isset($_GET['where'])) {
     $where = urlencode($_GET['where']);