Fixing security vulnerability in squirrelspell.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@2227 7612ce4b-ef26-0410-bec9-ea0150e637f0

diff --git a/plugins/squirrelspell/modules/check_me.mod.php b/plugins/squirrelspell/modules/check_me.mod
similarity index 100%
rename from plugins/squirrelspell/modules/check_me.mod.php
rename to plugins/squirrelspell/modules/check_me.mod

diff --git a/plugins/squirrelspell/modules/crypto.mod.php b/plugins/squirrelspell/modules/crypto.mod
similarity index 100%
rename from plugins/squirrelspell/modules/crypto.mod.php
rename to plugins/squirrelspell/modules/crypto.mod

diff --git a/plugins/squirrelspell/modules/crypto_badkey.mod.php b/plugins/squirrelspell/modules/crypto_badkey.mod
similarity index 100%
rename from plugins/squirrelspell/modules/crypto_badkey.mod.php
rename to plugins/squirrelspell/modules/crypto_badkey.mod

diff --git a/plugins/squirrelspell/modules/edit_dic.mod.php b/plugins/squirrelspell/modules/edit_dic.mod
similarity index 100%
rename from plugins/squirrelspell/modules/edit_dic.mod.php
rename to plugins/squirrelspell/modules/edit_dic.mod

diff --git a/plugins/squirrelspell/modules/enc_setup.mod.php b/plugins/squirrelspell/modules/enc_setup.mod
similarity index 100%
rename from plugins/squirrelspell/modules/enc_setup.mod.php
rename to plugins/squirrelspell/modules/enc_setup.mod

diff --git a/plugins/squirrelspell/modules/forget_me.mod.php b/plugins/squirrelspell/modules/forget_me.mod
similarity index 100%
rename from plugins/squirrelspell/modules/forget_me.mod.php
rename to plugins/squirrelspell/modules/forget_me.mod

diff --git a/plugins/squirrelspell/modules/forget_me_not.mod.php b/plugins/squirrelspell/modules/forget_me_not.mod
similarity index 100%
rename from plugins/squirrelspell/modules/forget_me_not.mod.php
rename to plugins/squirrelspell/modules/forget_me_not.mod

diff --git a/plugins/squirrelspell/modules/init.mod.php b/plugins/squirrelspell/modules/init.mod
similarity index 100%
rename from plugins/squirrelspell/modules/init.mod.php
rename to plugins/squirrelspell/modules/init.mod

diff --git a/plugins/squirrelspell/modules/lang_change.mod.php b/plugins/squirrelspell/modules/lang_change.mod
similarity index 100%
rename from plugins/squirrelspell/modules/lang_change.mod.php
rename to plugins/squirrelspell/modules/lang_change.mod

diff --git a/plugins/squirrelspell/modules/lang_setup.mod.php b/plugins/squirrelspell/modules/lang_setup.mod
similarity index 100%
rename from plugins/squirrelspell/modules/lang_setup.mod.php
rename to plugins/squirrelspell/modules/lang_setup.mod

diff --git a/plugins/squirrelspell/modules/options_main.mod.php b/plugins/squirrelspell/modules/options_main.mod
similarity index 100%
rename from plugins/squirrelspell/modules/options_main.mod.php
rename to plugins/squirrelspell/modules/options_main.mod

diff --git a/plugins/squirrelspell/sqspell_interface.php b/plugins/squirrelspell/sqspell_interface.php
index 9b17376621c0bca8c2038ec9ac6991bb63c0b35b..3ea858c4e0ff827cc048e35dcf414e69114dd29f 100644 (file)
--- a/plugins/squirrelspell/sqspell_interface.php
+++ b/plugins/squirrelspell/sqspell_interface.php
@@ -36,7 +36,7 @@
     /*
     ** see if someone is attempting to be nasty by trying to get out of the
     ** modules directory, although it probably wouldn't do them any good,
     /*
     ** see if someone is attempting to be nasty by trying to get out of the
     ** modules directory, although it probably wouldn't do them any good,

-    ** since every module has to end with .mod.php. Still, they deserve
+    ** since every module has to end with .mod. Still, they deserve

     ** to be warned. ;)
     */
     if (strstr($MOD, '.') || strstr($MOD, '/') || strstr($MOD, '%')){ 
     ** to be warned. ;)
     */
     if (strstr($MOD, '.') || strstr($MOD, '/') || strstr($MOD, '%')){ 


@@ -44,5 +44,5 @@
         exit;
     }
     /* fetch the module now. */
         exit;
     }
     /* fetch the module now. */

-    require_once("$SQSPELL_DIR/modules/$MOD.mod.php");
+    require_once("$SQSPELL_DIR/modules/$MOD.mod");

 ?>
 ?>

diff --git a/plugins/squirrelspell/sqspell_options.php b/plugins/squirrelspell/sqspell_options.php
index f124416432faf19bc99af1f6d6512966e8d737a0..8311678b91b6550367ec05d9b5777e3edeab0a6e 100644 (file)
--- a/plugins/squirrelspell/sqspell_options.php
+++ b/plugins/squirrelspell/sqspell_options.php
@@ -34,7 +34,7 @@
     /*
     ** see if someone is attempting to be nasty by trying to get out of the
     ** modules directory, although it probably wouldn't do them any good,
     /*
     ** see if someone is attempting to be nasty by trying to get out of the
     ** modules directory, although it probably wouldn't do them any good,

-    ** since every module has to end with .mod.php. Still, they deserve
+    ** since every module has to end with .mod. Still, they deserve

     ** to be warned. ;)
     */
     if (strstr($MOD, ".") || strstr($MOD, "/") || strstr($MOD, "%")){
     ** to be warned. ;)
     */
     if (strstr($MOD, ".") || strstr($MOD, "/") || strstr($MOD, "%")){


@@ -42,5 +42,5 @@
         exit;
     }
     /* load the stuff already. */
         exit;
     }
     /* load the stuff already. */

-    require_once("$SQSPELL_DIR/modules/$MOD.mod.php");
+    require_once("$SQSPELL_DIR/modules/$MOD.mod");

 ?>
 ?>