diff options
| author | roundcube <roundcube@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2006-04-04 21:42:54 +0000 |
|---|---|---|
| committer | roundcube <roundcube@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2006-04-04 21:42:54 +0000 |
| commit | cebc7e7970458e85f346431631668f7545c36637 (patch) | |
| tree | 33b8cc5aea0ab57e832f7555f3db2dd396223c4c | |
| parent | 7d6a0107fa71b4aac53a72219310c3f1615f1cbc (diff) | |
Strip tags on _auth, _action, _task parameters
git-svn-id: https://svn.roundcube.net/trunk@184 208e9e7b-5314-0410-a742-e7e81cd9613c
| -rw-r--r-- | roundcubemail/index.php | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/roundcubemail/index.php b/roundcubemail/index.php index 8a98af6ff..9bc0e63f1 100644 --- a/roundcubemail/index.php +++ b/roundcubemail/index.php @@ -2,7 +2,7 @@ /* +-----------------------------------------------------------------------+ | RoundCube Webmail IMAP Client | - | Version 0.1-20060320 | + | Version 0.1-20060402 | | | | Copyright (C) 2005, RoundCube Dev. - Switzerland | | Licensed under the GNU GPL | @@ -40,7 +40,7 @@ */ -define('RCMAIL_VERSION', '0.1-20060320'); +define('RCMAIL_VERSION', '0.1-20060402'); // define global vars @@ -84,11 +84,14 @@ require_once('PEAR.php'); // catch some url/post parameters -$_auth = !empty($_POST['_auth']) ? $_POST['_auth'] : $_GET['_auth']; -$_task = !empty($_POST['_task']) ? $_POST['_task'] : (!empty($_GET['_task']) ? $_GET['_task'] : 'mail'); -$_action = !empty($_POST['_action']) ? $_POST['_action'] : (!empty($_GET['_action']) ? $_GET['_action'] : ''); +$_auth = get_input_value('_auth', RCUBE_INPUT_GPC); +$_task = get_input_value('_task', RCUBE_INPUT_GPC); +$_action = get_input_value('_action', RCUBE_INPUT_GPC); $_framed = (!empty($_GET['_framed']) || !empty($_POST['_framed'])); +if (empty($_task)) + $_task = 'mail'; + if (!empty($_GET['_remote'])) $REMOTE_REQUEST = TRUE; |