diff options
| author | thomasb <thomasb@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2007-11-25 17:34:19 +0000 |
|---|---|---|
| committer | thomasb <thomasb@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2007-11-25 17:34:19 +0000 |
| commit | 916676eafd05379db18614e3c0431fdbd422feb2 (patch) | |
| tree | 3ff32ced45c2e0c8a57b9c64ebe676f7eda0d9c5 /roundcubemail/program/include/main.inc | |
| parent | 2f82db76ece7e62d182850dea58c902b7d0a43f3 (diff) | |
Fixed some potential security risks + updatedd changelog
git-svn-id: https://svn.roundcube.net/trunk@930 208e9e7b-5314-0410-a742-e7e81cd9613c
Diffstat (limited to 'roundcubemail/program/include/main.inc')
| -rw-r--r-- | roundcubemail/program/include/main.inc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/roundcubemail/program/include/main.inc b/roundcubemail/program/include/main.inc index 49dd2aaff..f0c603090 100644 --- a/roundcubemail/program/include/main.inc +++ b/roundcubemail/program/include/main.inc @@ -1432,7 +1432,7 @@ function rcmail_get_edit_field($col, $value, $attrib, $type='text') // use value from post if (!empty($_POST[$fname])) - $value = $_POST[$fname]; + $value = get_input_value($fname, RCUBE_INPUT_POST); $out = $input->show($value); |