Fixed missing quote character when trying to build cid: urls.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@9637 7612ce4b-ef26-0410-bec9-ea0150e637f0

diff --git a/ChangeLog b/ChangeLog
index bfd744e7bbcdd7f98873db6fe4873083b69e4cc2..338e40d4490c24cf10b6abf7aeebaac30a4f24b0 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -369,6 +369,7 @@ Version 1.5.1 -- CVS
   - Security: fix several cross site scripting (XSS) attacks. Thanks go to
     Martijn Brinkers for finding a lot of these. [CAN-2005-1769]
   - Update COPYING with new address of the FSF.
+  - Fixed missing quote character when trying to build cid: urls.
 
 Version 1.5.0 - 2 February 2004
 -------------------------------

diff --git a/functions/mime.php b/functions/mime.php
index af426110fae3fc205e2735e41dcc6001775981f2..98acbd543b9e13e02507ed7c7a2ef59daad0ce10 100644 (file)
--- a/functions/mime.php
+++ b/functions/mime.php
@@ -1683,7 +1683,7 @@ function sq_cid2http($message, $id, $cidurl, $mailbox){
          * If we couldn't generate a proper img url, drop in a blank image
          * instead of sending back empty, otherwise it causes unusual behaviour
          */
-        $httpurl = $quotchar . SM_PATH . 'images/blank.png';
+        $httpurl = $quotchar . SM_PATH . 'images/blank.png' . $quotchar;
     }
 
     return $httpurl;
@@ -2243,4 +2243,4 @@ function SendDownloadHeaders($type0, $type1, $filename, $force, $filesize=0) {
 
 }  // end fn SendDownloadHeaders
 
-?>
\ No newline at end of file
+?>