SF.net SVN: postfixadmin:[501] trunk/edit-domain.php

[<Gin...@us...>]

Revision: 501
          http://postfixadmin.svn.sourceforge.net/postfixadmin/?rev=501&view=rev
Author:   GingerDog
Date:     2008-12-15 21:27:31 +0000 (Mon, 15 Dec 2008)

Log Message:
-----------
edit-domain.php: only allow valid transport definitions through

Modified Paths:
--------------
    trunk/edit-domain.php

Modified: trunk/edit-domain.php
===================================================================
--- trunk/edit-domain.php	2008-12-13 07:30:36 UTC (rev 500)
+++ trunk/edit-domain.php	2008-12-15 21:27:31 UTC (rev 501)
@@ -69,7 +69,10 @@
 
     $fTransport = $CONF['transport_default'];
     if($CONF['transport'] != 'NO' && isset ($_POST['fTransport'])) {
-        $fTransport = escape_string ($_POST['fTransport']);
+        $fTransport = escape_string($_POST['fTransport']);
+        if(!in_array($fTransport, $CONF['transport_options'])) {
+            die("Invalid transport option given; check config.inc.php");
+        }
     }
 
     if (isset ($_POST['fBackupmx'])) $fBackupmx = escape_string ($_POST['fBackupmx']);


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.