3 --- mailboxes/search_form.cgi.orig 2012-06-29 22:31:51.000000000 +0000
4 +++ mailboxes/search_form.cgi
5 @@ -13,9 +13,9 @@ require './mailboxes-lib.pl';
8 print &ui_form_start("mail_search.cgi");
9 -print &ui_hidden("user", $in{'user'});
10 -print &ui_hidden("dom", $in{'dom'});
11 -print &ui_hidden("ofolder", $in{'folder'});
12 +print &ui_hidden("user", &html_escape($in{'user'}));
13 +print &ui_hidden("dom", &html_escape($in{'user'}));
14 +print &ui_hidden("ofolder", &html_escape($in{'folder'}));
15 print &ui_table_start($text{'sform_header'}, "width=100%", 2);
18 @@ -54,7 +54,7 @@ print &ui_table_row($text{'sform_folder2
19 print &ui_table_end();
20 print &ui_form_end([ [ undef, $text{'sform_ok'} ] ]);
22 -&ui_print_footer("list_mail.cgi?folder=$in{'folder'}&user=".
23 - &urlize($in{'user'})."&dom=$in{'dom'}", $text{'mail_return'},
24 +&ui_print_footer("list_mail.cgi?folder=" . &urlize($in{'folder'}) . "&user=".
25 + &urlize($in{'user'})."&dom=".&urlize($in{'dom'}), $text{'mail_return'},
26 &user_list_link(), $text{'index_return'});