From bd0551b22076b82a6d49e9f7a2b2e0c90a1b2326 Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Fri, 05 Feb 2016 07:25:27 -0500 Subject: [PATCH] Secure also downloads of addressbook exports, managesieve script exports and Enigma keys exports --- plugins/subscriptions_option/subscriptions_option.php | 6 ++++-- 1 files changed, 4 insertions(+), 2 deletions(-) diff --git a/plugins/subscriptions_option/subscriptions_option.php b/plugins/subscriptions_option/subscriptions_option.php index 130f16a..fa40631 100644 --- a/plugins/subscriptions_option/subscriptions_option.php +++ b/plugins/subscriptions_option/subscriptions_option.php @@ -61,7 +61,7 @@ $rcmail = rcmail::get_instance(); $use_subscriptions = $rcmail->config->get('use_subscriptions'); - $args['prefs']['use_subscriptions'] = isset($_POST['_use_subscriptions']) ? true : false; + $args['prefs']['use_subscriptions'] = isset($_POST['_use_subscriptions']); // if the use_subscriptions preference changes, flush the folder cache if (($use_subscriptions && !isset($_POST['_use_subscriptions'])) || @@ -86,7 +86,9 @@ { $rcmail = rcmail::get_instance(); if (!$rcmail->config->get('use_subscriptions', true)) { - $args['table']->remove_column('subscribed'); + foreach ($args['list'] as $idx => $data) { + $args['list'][$idx]['content'] = preg_replace('/<input [^>]+>/', '', $data['content']); + } } return $args; } -- Gitblit v1.9.1