From 5ec12433855b1efe16c60db09c8fd5a21495a3a4 Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Wed, 15 Nov 2023 19:07:17 +0100
Subject: [inc/Message] Fix deserializing messages from URL

---
 inc/message.inc.php | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/inc/message.inc.php b/inc/message.inc.php
index a26369f5..119bb2ba 100644
--- a/inc/message.inc.php
+++ b/inc/message.inc.php
@@ -154,12 +154,15 @@ class Message
 		$messages = is_array($_REQUEST['message']) ? $_REQUEST['message'] : array($_REQUEST['message']);
 		foreach ($messages as $message) {
 			$data = explode('|', $message);
+			if (count($data) < 2)
+				continue;
 			if (substr($data[0], -1) === '@') {
 				$data[0] = substr($data[0], 0, -1);
-				array_splice($data, 1, 0, true);
+				array_splice($data, 2, 0, true);
 			}
-			if (count($data) < 2 || !preg_match('/^(danger|warning|info|success)$/', $data[0])) continue;
-			self::add($data[0], $data[1], array_slice($data, 1));
+			if (!preg_match('/^(danger|warning|info|success)$/', $data[0]))
+				continue;
+			self::add($data[0], $data[1], array_slice($data, 2));
 		}
 	}
 
-- 
cgit v1.2.3-55-g7522