Enhance security

[qtadmin.git] / message_view.php

diff --git a/message_view.php b/message_view.php
index e81d984f4dce3d2047cd04c2c1e8eb1142f0dde8..aa276d82f02c1e93342017b94348922c42788345 100644 (file)
--- a/message_view.php
+++ b/message_view.php
@@ -13,7 +13,7 @@
 
         $mail = unserialize($_SESSION['mailInfo'][$id]);
 
-        if (false == $util->authorized($mail->recipient)) {
+        if (! is_object($mail) || false == $util->authorized($mail->recipient)) {
             header('Location: index.php');
             exit;
         }