Force ajax calls to protect from CSRF

thomascube

2009-07-16 881217a5c95dbfe4e62154a2c0edd135b504220e

 program/steps/mail/sendmdn.inc

@@ -19,6 +19,9 @@

*/

// only process ajax requests
if (!$OUTPUT->ajax_call)
  return;

if (!empty($_POST['_uid'])) {
  $sent = rcmail_send_mdn(get_input_value('_uid', RCUBE_INPUT_POST), $smtp_error);