--- branches/SM-1_4-STABLE/squirrelmail/functions/imap_general.php	2009/05/11 22:08:25	13673
+++ branches/SM-1_4-STABLE/squirrelmail/functions/imap_general.php	2009/05/11 22:17:35	13674
@@ -973,7 +973,8 @@
  * LDAP whatever way to find the users IMAP server.
  */
 function map_yp_alias($username) {
+   $escusername = escapeshellarg($username);
+   $yp = `ypmatch $escusername aliases`;
-   $yp = `ypmatch $username aliases`;
    return chop(substr($yp, strlen($username)+1));
 }