Typo

[squirrelmail.git] / src / empty_trash.php

diff --git a/src/empty_trash.php b/src/empty_trash.php
index e5eae5ded1b57acadcee0ee69632c2f5e085345d..cd4ce747e40da0512959374a9a43ff6a0d5f1a33 100644 (file)
--- a/src/empty_trash.php
+++ b/src/empty_trash.php
@@ -6,7 +6,7 @@
  * Handles deleting messages from the trash folder without
  * deleting subfolders.
  *
- * @copyright 1999-2010 The SquirrelMail Project Team
+ * @copyright 1999-2013 The SquirrelMail Project Team
  * @license http://opensource.org/licenses/gpl-license.php GNU Public License
  * @version $Id$
  * @package squirrelmail
@@ -30,6 +30,10 @@ sqgetGlobalVar('delimiter', $delimiter, SQ_SESSION);
 
 /* finished globals */
 
+// first do a security check
+sqgetGlobalVar('smtoken', $submitted_token, SQ_GET, '');
+sm_validate_security_token($submitted_token, -1, TRUE);
+
 $imap_stream = sqimap_login($username, false, $imapServerAddress, $imapPort, 0);
 
 $mailbox = $trash_folder;