edit-domain.php: only allow valid transport definitions through

git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@501 a1433add-5e2c-0410-b055-b7f2511e0802
17 years ago · bb840239a5
parent 430b75c853
commit bb840239a5
1 changed files with 4 additions and 1 deletions
--- a/edit-domain.php
+++ b/edit-domain.php
@ -69,7 +69,10 @@ if ($_SERVER['REQUEST_METHOD'] == "POST")

    $fTransport = $CONF['transport_default'];
    if($CONF['transport'] != 'NO' && isset ($_POST['fTransport'])) {
-        $fTransport = escape_string ($_POST['fTransport']);
+        $fTransport = escape_string($_POST['fTransport']);
+        if(!in_array($fTransport, $CONF['transport_options'])) {
+            die("Invalid transport option given; check config.inc.php");
+        }
    }

    if (isset ($_POST['fBackupmx'])) $fBackupmx = escape_string ($_POST['fBackupmx']);