aboutsummaryrefslogtreecommitdiffstats
path: root/contrib
diff options
context:
space:
mode:
authormarkster <markster@f38db490-d61c-443f-a65b-d21fe96a405b>2003-05-22 04:50:53 +0000
committermarkster <markster@f38db490-d61c-443f-a65b-d21fe96a405b>2003-05-22 04:50:53 +0000
commitb31b5067c4b7c7615f984ed83fdb6cbaa879db5c (patch)
treeaa6a9fc47c37b7273e1b429c847aba714202b2ce /contrib
parentc65750d4500c23cc98581613657907fd61359c12 (diff)
Fix vmail "taint" issue
git-svn-id: http://svn.digium.com/svn/asterisk/trunk@1051 f38db490-d61c-443f-a65b-d21fe96a405b
Diffstat (limited to 'contrib')
-rwxr-xr-xcontrib/scripts/vmail.cgi6
1 files changed, 6 insertions, 0 deletions
diff --git a/contrib/scripts/vmail.cgi b/contrib/scripts/vmail.cgi
index cd519d701..fb22f116e 100755
--- a/contrib/scripts/vmail.cgi
+++ b/contrib/scripts/vmail.cgi
@@ -600,6 +600,12 @@ sub message_rename()
my ($context, $mbox, $oldfolder, $old, $newfolder, $new) = @_;
my $oldfile, $newfile;
return if ($old eq $new) && ($oldfolder eq $newfolder);
+
+ if ($context =~ /^(\w+)$/) {
+ $context = $1;
+ } else {
+ die("Invalid Context<BR>\n");
+ }
if ($mbox =~ /^(\w+)$/) {
$mbox = $1;