Index: openacs-4/packages/acs-mail-lite/tcl/email-inbound-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-mail-lite/tcl/email-inbound-procs.tcl,v diff -u -r1.15.2.2 -r1.15.2.3 --- openacs-4/packages/acs-mail-lite/tcl/email-inbound-procs.tcl 16 Jun 2019 11:40:00 -0000 1.15.2.2 +++ openacs-4/packages/acs-mail-lite/tcl/email-inbound-procs.tcl 16 Jun 2019 12:50:42 -0000 1.15.2.3 @@ -186,7 +186,9 @@ lpri_party_ids - hpri_object_ids - lpri_object_ids { - set v_p [ad_var_type_check_integerlist_p $new(${spn})] + # test, if list contains only integers + set map [lmap x $new(${spn}) {if {[string is integer -strict $x]} continue; set x} ] + set v_p [expr {$map eq ""}] } hpri_subject_glob - lpri_subject_glob { @@ -1287,7 +1289,7 @@ # method, such as a pre-signed unique-id in message # content could be added as well. # For now, we warn whenever this is used. - if { [ad_var_type_check_number_p $pot_object_id] } { + if { [string is integer -strict $pot_object_id] } { if { [acs_object::object_p -id h_arr(aml_object_id)] } { ns_log Warning "acs_mail_lite::inbound_queue_pull \ Accepted insecure email object_id '${pot_object_id}' \ Index: openacs-4/packages/acs-mail-lite/tcl/legacy-inbound-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-mail-lite/tcl/legacy-inbound-procs.tcl,v diff -u -r1.2 -r1.2.2.1 --- openacs-4/packages/acs-mail-lite/tcl/legacy-inbound-procs.tcl 22 Jun 2018 15:48:55 -0000 1.2 +++ openacs-4/packages/acs-mail-lite/tcl/legacy-inbound-procs.tcl 16 Jun 2019 12:50:42 -0000 1.2.2.1 @@ -81,7 +81,7 @@ # Special treatment for e-mails which look like they contain an object_id set pot_object_id [lindex [split $email(to) "@"] 0] ns_log Debug "Object_id for mail:: $pot_object_id" - if {[ad_var_type_check_number_p $pot_object_id]} { + if {[string is integer -strict $pot_object_id]} { if {[acs_object::object_p -id $pot_object_id]} { callback acs_mail_lite::incoming_object_email -array email -object_id $pot_object_id