From: Mark Spencer <markster@digium.com>
Date: Thu, 22 May 2003 04:50:53 +0000 (+0000)
Subject: Fix vmail "taint" issue
X-Git-Tag: 0.5.0~445
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=bc75095a9ac7988f2bb29e9043be089d4e4c5cd2;p=thirdparty%2Fasterisk.git

Fix vmail "taint" issue


git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@1051 65c4cc65-6c06-0410-ace0-fbb531ad65f3
---

diff --git a/contrib/scripts/vmail.cgi b/contrib/scripts/vmail.cgi
index cd519d7017..fb22f116e6 100755
--- a/contrib/scripts/vmail.cgi
+++ b/contrib/scripts/vmail.cgi
@@ -600,6 +600,12 @@ sub message_rename()
 	my ($context, $mbox, $oldfolder, $old, $newfolder, $new) = @_;
 	my $oldfile, $newfile;
 	return if ($old eq $new) && ($oldfolder eq $newfolder);
+
+        if ($context =~ /^(\w+)$/) {
+                $context = $1;
+        } else {
+                die("Invalid Context<BR>\n");
+        }
 	
 	if ($mbox =~ /^(\w+)$/) {
 		$mbox = $1;
diff --git a/vmail.cgi b/vmail.cgi
index cd519d7017..fb22f116e6 100755
--- a/vmail.cgi
+++ b/vmail.cgi
@@ -600,6 +600,12 @@ sub message_rename()
 	my ($context, $mbox, $oldfolder, $old, $newfolder, $new) = @_;
 	my $oldfile, $newfile;
 	return if ($old eq $new) && ($oldfolder eq $newfolder);
+
+        if ($context =~ /^(\w+)$/) {
+                $context = $1;
+        } else {
+                die("Invalid Context<BR>\n");
+        }
 	
 	if ($mbox =~ /^(\w+)$/) {
 		$mbox = $1;