Changeset 886aafe in github

Timestamp:

Aug 24, 2011 4:39:23 AM (21 months ago)

Author:

thomascube <thomas@…>

Branches:

master, HEAD, courier-fix, dev-browser-capabilities, pdo, release-0.7, release-0.8

Children:

9d5d7a8

Parents:

0c7fe2f

Message:

Don't rely on rcmail->task for session error check; use _REQUEST data instead

File:

• index.php (modified) (1 diff)

index.php

@@ -156 +156 @@
 if (empty($RCMAIL->user->ID)) {
   // log session failures
-  if ($RCMAIL->task != 'login' && $RCMAIL->task != 'logout' && !$session_error && ($sess_id = $_COOKIE[ini_get('session.name')])) {
+  if (!in_array(get_input_value('_task', RCUBE_INPUT_GPC), array('login','logout')) && !$session_error && ($sess_id = $_COOKIE[ini_get('session.name')])) {
     $RCMAIL->session->log("Aborted session " . $sess_id . "; no valid session data found");
     $session_error = true;