Browse Source

Fixed missing quote character when trying to build cid: urls.

jangliss 20 years ago
parent
commit
70541eb8d3
2 changed files with 3 additions and 2 deletions
  1. 1 0
      ChangeLog
  2. 2 2
      functions/mime.php

+ 1 - 0
ChangeLog

@@ -369,6 +369,7 @@ Version 1.5.1 -- CVS
   - Security: fix several cross site scripting (XSS) attacks. Thanks go to
     Martijn Brinkers for finding a lot of these. [CAN-2005-1769]
   - Update COPYING with new address of the FSF.
+  - Fixed missing quote character when trying to build cid: urls.
 
 Version 1.5.0 - 2 February 2004
 -------------------------------

+ 2 - 2
functions/mime.php

@@ -1683,7 +1683,7 @@ function sq_cid2http($message, $id, $cidurl, $mailbox){
          * If we couldn't generate a proper img url, drop in a blank image
          * instead of sending back empty, otherwise it causes unusual behaviour
          */
-        $httpurl = $quotchar . SM_PATH . 'images/blank.png';
+        $httpurl = $quotchar . SM_PATH . 'images/blank.png' . $quotchar;
     }
 
     return $httpurl;
@@ -2243,4 +2243,4 @@ function SendDownloadHeaders($type0, $type1, $filename, $force, $filesize=0) {
 
 }  // end fn SendDownloadHeaders
 
-?>
+?>