Pop_mail.asp does not check if logon is required, when invoked with a mode value of DoIt. To fix it, add the code in red, at the beginning of pop_mail.asp (line #42). The code before and after the code in red, shows how the file should look like after the change:
<!--#INCLUDE FILE="config.asp" -->
<!--#INCLUDE FILE="inc_sha256.asp" -->
<!--#INCLUDE FILE="inc_header_short.asp" -->
<!--#INCLUDE file="inc_func_member.asp" -->
<%
If strLogonForMail = "1" And mlev = 0 Then
Err_Msg = "<li>You must be logged on to send a message</li>"
Response.Write " <table>" & vbNewLine & _
" <tr>" & vbNewLine & _
" <td><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ color=""" & strHiLiteFontColor & """><ul>" & Err_Msg & "</ul></font></td>" & vbNewLine & _
" </tr>" & vbNewLine & _
" </table>" & vbNewLine
WriteFooterShort
Response.End
End If
if Request.QueryString("ID") <> "" and IsNumeric(Request.QueryString("ID")) = True then
intMemberID = cLng(Request.QueryString("ID"))
else
intMemberID = 0
end if
<
Forum Locked
Topic Locked
Posted - 12 November 2007 : 07:39:17
