From: Mhonarc archives guy <archives@archanis.postgresql.org>
Date: Wed, 4 Jan 2012 19:02:53 +0000 (+0000)
Subject: fix PHP injection vulnerability
X-Git-Url: http://git.postgresql.org/gitweb/?a=commitdiff_plain;h=3feadce0e7865251af875232ce9bb412309a3600;p=pgweb-old.git

fix PHP injection vulnerability
---

diff --git a/archives/bin/resource-common b/archives/bin/resource-common
index 99b19419..e7001c78 100644
--- a/archives/bin/resource-common
+++ b/archives/bin/resource-common
@@ -101,7 +101,7 @@ text/x-html; m2h_text_plain::filter; mhtxtplain.pl
 
 <MSGPGBEGIN>
 <?php
- $$title = "$SUBJECTNA:72$";
+ $$title = '$SUBJECTNA:72J$';
  $$base = "/$LIST$/$YEAR$-$MONTH$/";
 if (strstr($$_SERVER["PHP_SELF"], "msgid")) {
 	$$dots = "../../..";