reject messages with no @ in the ID

1 files changed, 6 insertions, 0 deletions

diff --git a/archives/html/msgtxt.php b/archives/html/msgtxt.php
index 639c1dfd..1d2c792e 100644
--- a/archives/html/msgtxt.php
+++ b/archives/html/msgtxt.php
@@ -3,6 +3,12 @@
 $id = $_GET["id"];
 $id = str_replace("/", "_", $id);
 
+if (strpos($id, "@") == FALSE) {
+	header("Status: 404 fucked up message-id");
+	print("go away, you insensitive clod\n");
+	exit;
+}
+	
 $parts = split("@", $id, 2);
 
 header("Content-type: text/plain");