diff options
| author | Mark Spencer <markster@digium.com> | 2003-05-22 04:50:53 +0000 |
|---|---|---|
| committer | Mark Spencer <markster@digium.com> | 2003-05-22 04:50:53 +0000 |
| commit | bc75095a9ac7988f2bb29e9043be089d4e4c5cd2 (patch) | |
| tree | aa6a9fc47c37b7273e1b429c847aba714202b2ce /contrib/scripts/vmail.cgi | |
| parent | d82c9db4c823fe9f6602562fd319a3d35a15ca7d (diff) | |
Fix vmail "taint" issue
git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@1051 65c4cc65-6c06-0410-ace0-fbb531ad65f3
Diffstat (limited to 'contrib/scripts/vmail.cgi')
| -rwxr-xr-x | contrib/scripts/vmail.cgi | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/contrib/scripts/vmail.cgi b/contrib/scripts/vmail.cgi index cd519d701..fb22f116e 100755 --- a/contrib/scripts/vmail.cgi +++ b/contrib/scripts/vmail.cgi @@ -600,6 +600,12 @@ sub message_rename() my ($context, $mbox, $oldfolder, $old, $newfolder, $new) = @_; my $oldfile, $newfile; return if ($old eq $new) && ($oldfolder eq $newfolder); + + if ($context =~ /^(\w+)$/) { + $context = $1; + } else { + die("Invalid Context<BR>\n"); + } if ($mbox =~ /^(\w+)$/) { $mbox = $1; |