From bd0551b22076b82a6d49e9f7a2b2e0c90a1b2326 Mon Sep 17 00:00:00 2001 From: Aleksander Machniak <alec@alec.pl> Date: Fri, 05 Feb 2016 07:25:27 -0500 Subject: [PATCH] Secure also downloads of addressbook exports, managesieve script exports and Enigma keys exports --- program/steps/mail/mark.inc | 9 ++++++--- 1 files changed, 6 insertions(+), 3 deletions(-) diff --git a/program/steps/mail/mark.inc b/program/steps/mail/mark.inc index e81f6c9..8a49114 100644 --- a/program/steps/mail/mark.inc +++ b/program/steps/mail/mark.inc @@ -1,5 +1,6 @@ <?php -/* + +/** +-----------------------------------------------------------------------+ | program/steps/mail/mark.inc | | | @@ -39,7 +40,7 @@ if (($_uids = rcube_utils::get_input_value('_uid', rcube_utils::INPUT_POST)) && ($flag = rcube_utils::get_input_value('_flag', rcube_utils::INPUT_POST)) ) { - $flag = $a_flags_map[$flag] ? $a_flags_map[$flag] : strtoupper($flag); + $flag = $a_flags_map[$flag] ?: strtoupper($flag); if ($flag == 'DELETED' && $skip_deleted && $_POST['_from'] != 'show') { // count messages before changing anything @@ -68,7 +69,9 @@ if ($flag == 'DELETED' && $read_deleted && !empty($_POST['_ruid'])) { $ruids = rcube_utils::get_input_value('_ruid', rcube_utils::INPUT_POST); - $read = $RCMAIL->storage->set_flag($ruids, 'SEEN'); + foreach (rcmail::get_uids($ruids) as $mbox => $uids) { + $read += (int)$RCMAIL->storage->set_flag($uids, 'SEEN', $mbox); + } if ($read && !$skip_deleted) { $OUTPUT->command('flag_deleted_as_read', $ruids); -- Gitblit v1.9.1