From cb2bc809ef29f349d38c89e202d821e67bb4c947 Mon Sep 17 00:00:00 2001 From: thomascube <thomas@roundcube.net> Date: Tue, 21 Sep 2010 14:47:55 -0400 Subject: [PATCH] Fix db_mode check in insert_id() --- program/steps/settings/delete_identity.inc | 47 ++++++++++++++++++++++++----------------------- 1 files changed, 24 insertions(+), 23 deletions(-) diff --git a/program/steps/settings/delete_identity.inc b/program/steps/settings/delete_identity.inc index 560a2b1..06bcab9 100644 --- a/program/steps/settings/delete_identity.inc +++ b/program/steps/settings/delete_identity.inc @@ -5,7 +5,7 @@ | program/steps/settings/delete_identity.inc | | | | This file is part of the RoundCube Webmail client | - | Copyright (C) 2005, RoundCube Dev. - Switzerland | + | Copyright (C) 2005-2009, RoundCube Dev. - Switzerland | | Licensed under the GNU GPL | | | | PURPOSE: | @@ -19,33 +19,34 @@ */ -if (($ids = get_input_value('_iid', RCUBE_INPUT_GET)) && preg_match('/^[0-9]+(,[0-9]+)*$/', $ids)) - { - $DB->query("UPDATE ".get_table_name('identities')." - SET del=1 - WHERE user_id=? - AND identity_id IN (".$ids.")", - $_SESSION['user_id']); +$iid = get_input_value('_iid', RCUBE_INPUT_GPC); - $count = $DB->affected_rows(); - if ($count) - { - $commands = show_message('deletedsuccessfully', 'confirmation'); - } +// check request token +if (!$OUTPUT->ajax_call && !$RCMAIL->check_request(RCUBE_INPUT_GPC)) { + $OUTPUT->show_message('invalidrequest', 'error'); + rcmail_overwrite_action('identities'); + return; +} - // send response - if ($REMOTE_REQUEST) - rcube_remote_response($commands); +if ($iid && preg_match('/^[0-9]+(,[0-9]+)*$/', $iid)) +{ + $plugin = $RCMAIL->plugins->exec_hook('identity_delete', array('id' => $iid)); + + if (!$plugin['abort'] && $USER->delete_identity($iid)) { + $OUTPUT->show_message('deletedsuccessfully', 'confirmation', null, false); } + else { + $OUTPUT->show_message('nodeletelastidentity', 'error', null, false); + } + // send response + if ($OUTPUT->ajax_call) + $OUTPUT->send(); +} - -if ($REMOTE_REQUEST) +if ($OUTPUT->ajax_call) exit; - // go to identities page -$_action = 'identities'; +rcmail_overwrite_action('identities'); -// overwrite action variable -$OUTPUT->add_script(sprintf("\n%s.set_env('action', '%s');", $JS_OBJECT_NAME, $_action)); -?> + -- Gitblit v1.9.1