Re: [Regression] search results expired?
Paul Lesniewski <[email protected]>
| Newsgroups | gmane.mail.squirrelmail.devel |
|---|---|
| Message-ID | <[email protected]> |
On Mon, Aug 31, 2009 at 12:39 AM, Ralf Hildebrandt<[email protected]> wrote: > * Paul Lesniewski <[email protected]>: > >> > That would be because of some new improved security. Thanks for the >> > catch. >> > >> > http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail?view=rev&revision=13833 >> > >> > src/read_body.php is really the only change I can see you needing for >> > this issue. I did notice that the token validation only looked for >> > GET whilst it passed in a post too, so I made a little change there in >> > src/search.php as well. >> >> There are no forms using POST that point to src/search.php that I know >> of. I switched it back. > > Uhm, so what I the patch I need to apply? You can apply all of Jon's patch without harm, but if you want to stay in sync with what will be 1.4.20, don't apply the part of his patch against src/search.php -- Paul Lesniewski SquirrelMail Team Please support Open Source Software by donating to SquirrelMail! http://squirrelmail.org/donate_paul_lesniewski.php ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ----- squirrelmail-devel mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: [email protected] List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel