Force ajax calls to protect from CSRF

thomascube

2009-07-16 881217a5c95dbfe4e62154a2c0edd135b504220e

 program/steps/mail/folders.inc

@@ -5,7 +5,7 @@
 | program/steps/mail/folders.inc                                        |
 |                                                                       |
 | This file is part of the RoundCube Webmail client                     |
 | Copyright (C) 2005-2007, RoundCube Dev. - Switzerland                 |
 | Copyright (C) 2005-2009, RoundCube Dev. - Switzerland                 |
 | Licensed under the GNU GPL                                            |
 |                                                                       |
 | PURPOSE:                                                              |
@@ -18,6 +18,10 @@
 $Id$
*/

// only process ajax requests
if (!$OUTPUT->ajax_call)
  return;

$mbox_name = $IMAP->get_mailbox_name();

// send EXPUNGE command