From 36ab16cf8e49c4cbf03ace9d2025edbb28f877a5 Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Mon, 12 Nov 2007 00:14:16 +0000 Subject: [PATCH] - Always display the $_POST data if available (tSubject and tBody were not set, resulting in the default vacation texts displayed) git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@212 a1433add-5e2c-0410-b055-b7f2511e0802 --- edit-vacation.php | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/edit-vacation.php b/edit-vacation.php index ee82259a..831d5bca 100644 --- a/edit-vacation.php +++ b/edit-vacation.php @@ -84,10 +84,12 @@ if ($_SERVER['REQUEST_METHOD'] == "GET") if ($_SERVER['REQUEST_METHOD'] == "POST") { - if (isset ($_POST['fSubject'])) $fSubject = escape_string ($_POST['fSubject']); - if (isset ($_POST['fBody'])) $fBody = escape_string ($_POST['fBody']); - if (isset ($_POST['fChange'])) $fChange = escape_string ($_POST['fChange']); - if (isset ($_POST['fBack'])) $fBack = escape_string ($_POST['fBack']); + $tSubject = safepost('fSubject'); + $fSubject = escape_string ( $tSubject); + $tBody = safepost('fBody'); + $fBody = escape_string ( $tBody); + $fChange = escape_string (safepost('fChange')); + $fBack = escape_string (safepost('fBack')); if(authentication_has_role('admin') && isset($_GET['domain'])) { $fDomain = escape_string ($_GET['domain']);