Check filesize of template includes (#1484409)

CHANGELOG

@@ -12,6 +12,7 @@ CHANGELOG RoundCube Webmail
 - Added //IGNORE to iconv call (patch #1484420, closes #1484023)
 - Check if mbstring supports charset (#1484290 and #1484292)
 - Prefer iconv over mbstring (as suggested in #1484292)
+- Check filesize of template includes (#1484409)
 - Updated Simplified Chinese localization
 - Added Ukrainian translation
 

program/include/rcmail_template.inc

@@ -453,7 +453,7 @@ class rcmail_template extends rcube_html_page
       // include a file 
       case 'include':
         $path = realpath($this->config['skin_path'].$attrib['file']);
-        if ($fp = @fopen($path, 'r'))
+        if (filesize($path) && ($fp = @fopen($path, 'r')))
         {
           $incl = fread($fp, filesize($path));
           fclose($fp);