From 74320ac6edefb7bc8384dc7c9ca55b9503023dba Mon Sep 17 00:00:00 2001
From: jangliss <jangliss@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Date: Tue, 22 Dec 2009 17:15:34 +0000
Subject: [PATCH] Fix for security token missing in newmail plugin (#2919418).

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@13880 7612ce4b-ef26-0410-bec9-ea0150e637f0
---
 doc/ChangeLog                   | 1 +
 plugins/newmail/newmail_opt.php | 1 +
 2 files changed, 2 insertions(+)

diff --git a/doc/ChangeLog b/doc/ChangeLog
index 3d8a0f8c..8e664d74 100644
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -325,6 +325,7 @@ Version 1.5.2 - SVN
   - Implemented page referal verification mechanism. (Secunia Advisory SA34627)
   - Implemented security token system. (Secunia Advisory SA34627)
   - Fix issue with multi-part related messages not showing all attachments (#2830140).
+  - Fix for security token missing in newmail plugin (#2919418).
 
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------
diff --git a/plugins/newmail/newmail_opt.php b/plugins/newmail/newmail_opt.php
index 3d618e1d..38245808 100644
--- a/plugins/newmail/newmail_opt.php
+++ b/plugins/newmail/newmail_opt.php
@@ -227,6 +227,7 @@ echo html_tag( 'tr', "\n" .
         html_tag( 'td',
             '<input type="hidden" name="optmode" value="submit" />' .
             '<input type="hidden" name="optpage" value="newmail" />' .
+        	'<input type="hidden" name="smtoken" value="' . sm_generate_security_token() . '" />' .
             '<input type="submit" value="' . _("Submit") . '" name="submit_newmail" />',
         'left' )
      ) . "\n";
-- 
2.25.1