From 037af6890fe6fdb84a08d3c86083e847c90ec0ad Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Tue, 22 Oct 2013 08:17:26 -0400
Subject: [PATCH] Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)
---
plugins/archive/archive.php | 3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/plugins/archive/archive.php b/plugins/archive/archive.php
index 33e0daa..0a298cb 100644
--- a/plugins/archive/archive.php
+++ b/plugins/archive/archive.php
@@ -67,9 +67,10 @@
{
$rcmail = rcmail::get_instance();
$archive_folder = $rcmail->config->get('archive_mbox');
+ $localize_name = $rcmail->config->get('archive_localize_name', true);
// set localized name for the configured archive folder
- if ($archive_folder) {
+ if ($archive_folder && $localize_name) {
if (isset($p['list'][$archive_folder]))
$p['list'][$archive_folder]['name'] = $this->gettext('archivefolder');
else // search in subfolders
--
Gitblit v1.9.1