From 8f70271bd26bd38706d9bc29eee655ead08a8465 Mon Sep 17 00:00:00 2001 From: Lars Kneschke Date: Sun, 23 Jul 2006 04:06:36 +0000 Subject: [PATCH] Fix for bug: Error when imap folder contains a quote in the name https://sourceforge.net/tracker/?func=detail&atid=554338&aid=1518556&group_id=78745 added htmlspecialchars where needed --- felamimail/inc/class.uiwidgets.inc.php | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/felamimail/inc/class.uiwidgets.inc.php b/felamimail/inc/class.uiwidgets.inc.php index 95de7ee282..70b74a73fa 100644 --- a/felamimail/inc/class.uiwidgets.inc.php +++ b/felamimail/inc/class.uiwidgets.inc.php @@ -158,13 +158,18 @@ $image2 = "'kfm_home.png'"; $image3 = "'kfm_home.png'"; } + + $parentName = htmlspecialchars($parentName, ENT_QUOTES, $this->charset); + $longName = htmlspecialchars($longName, ENT_QUOTES, $this->charset); + $folder_name = htmlspecialchars($folder_name, ENT_QUOTES, $this->charset); $folder_tree_new .= "tree.insertNewItem('$parentName','$longName','$folder_name',onNodeSelect,$image1,$image2,$image3,'$entryOptions');\n"; if($_displayCheckBox) $folder_tree_new .= "tree.setCheck('$longName','".(int)$obj->subscribed."');"; } - $folder_tree_new.= "tree.closeAllItems(0);tree.openItem('$_selected');"; + $selected = htmlspecialchars($_selected, ENT_QUOTES, $this->charset); + $folder_tree_new.= "tree.closeAllItems(0);tree.openItem('$selected');"; return $folder_tree_new; }