浏览代码

Fix for security token missing in newmail plugin (#2919418).

jangliss 15 年之前
父节点
当前提交
fe144bc255
共有 2 个文件被更改,包括 2 次插入0 次删除
  1. 1 0
      doc/ChangeLog
  2. 1 0
      plugins/newmail/newmail_opt.php

+ 1 - 0
doc/ChangeLog

@@ -325,6 +325,7 @@ Version 1.5.2 - SVN
   - Implemented page referal verification mechanism. (Secunia Advisory SA34627)
   - Implemented page referal verification mechanism. (Secunia Advisory SA34627)
   - Implemented security token system. (Secunia Advisory SA34627)
   - Implemented security token system. (Secunia Advisory SA34627)
   - Fix issue with multi-part related messages not showing all attachments (#2830140).
   - Fix issue with multi-part related messages not showing all attachments (#2830140).
+  - Fix for security token missing in newmail plugin (#2919418).
 
 
 Version 1.5.1 (branched on 2006-02-12)
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------
 --------------------------------------

+ 1 - 0
plugins/newmail/newmail_opt.php

@@ -227,6 +227,7 @@ echo html_tag( 'tr', "\n" .
         html_tag( 'td',
         html_tag( 'td',
             '<input type="hidden" name="optmode" value="submit" />' .
             '<input type="hidden" name="optmode" value="submit" />' .
             '<input type="hidden" name="optpage" value="newmail" />' .
             '<input type="hidden" name="optpage" value="newmail" />' .
+        	'<input type="hidden" name="smtoken" value="' . sm_generate_security_token() . '" />' .
             '<input type="submit" value="' . _("Submit") . '" name="submit_newmail" />',
             '<input type="submit" value="' . _("Submit") . '" name="submit_newmail" />',
         'left' )
         'left' )
      ) . "\n";
      ) . "\n";