diff options
author | markster <markster@f38db490-d61c-443f-a65b-d21fe96a405b> | 2003-05-22 04:50:53 +0000 |
---|---|---|
committer | markster <markster@f38db490-d61c-443f-a65b-d21fe96a405b> | 2003-05-22 04:50:53 +0000 |
commit | b31b5067c4b7c7615f984ed83fdb6cbaa879db5c (patch) | |
tree | aa6a9fc47c37b7273e1b429c847aba714202b2ce /contrib/scripts | |
parent | c65750d4500c23cc98581613657907fd61359c12 (diff) |
Fix vmail "taint" issue
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@1051 f38db490-d61c-443f-a65b-d21fe96a405b
Diffstat (limited to 'contrib/scripts')
-rwxr-xr-x | contrib/scripts/vmail.cgi | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/contrib/scripts/vmail.cgi b/contrib/scripts/vmail.cgi index cd519d701..fb22f116e 100755 --- a/contrib/scripts/vmail.cgi +++ b/contrib/scripts/vmail.cgi @@ -600,6 +600,12 @@ sub message_rename() my ($context, $mbox, $oldfolder, $old, $newfolder, $new) = @_; my $oldfile, $newfile; return if ($old eq $new) && ($oldfolder eq $newfolder); + + if ($context =~ /^(\w+)$/) { + $context = $1; + } else { + die("Invalid Context<BR>\n"); + } if ($mbox =~ /^(\w+)$/) { $mbox = $1; |