Changeset c294eaa in github
- Timestamp:
- Mar 8, 2011 3:40:47 AM (2 years ago)
- Branches:
- master, HEAD, courier-fix, dev-browser-capabilities, pdo, release-0.6, release-0.7, release-0.8
- Children:
- 4cfe66f
- Parents:
- fb061aa
- Files:
-
- 3 edited
Legend:
- Unmodified
- Added
- Removed
-
CHANGELOG
rfb061aa rc294eaa 2 2 =========================== 3 3 4 - Remove redundant DELETE query (for old session deletion) on login 4 5 - Get around unreliable rand() and mt_rand() in session ID generation (#1486281) 5 6 - Fix some emails are not shown using Cyrus IMAP (#1487820) -
index.php
rde62f02 rc294eaa 99 99 // create new session ID 100 100 $RCMAIL->session->remove('temp'); 101 $RCMAIL->session->regenerate_id(); 101 // regenerate the session, don't destroy the current session 102 // it was destroyed already by $RCMAIL->kill_session() above 103 $RCMAIL->session->regenerate_id(false); 102 104 103 105 // send auth cookie if necessary … … 111 113 if ($url = get_input_value('_url', RCUBE_INPUT_POST)) { 112 114 parse_str($url, $query); 113 115 114 116 // prevent endless looping on login page 115 117 if ($query['_task'] == 'login') -
program/include/rcube_session.php
rfb061aa rc294eaa 206 206 /** 207 207 * Generate and set new session id 208 */ 209 public function regenerate_id() 210 { 211 // delete old session record 212 $this->destroy(session_id()); 208 * 209 * @param boolean $destroy If enabled the current session will be destroyed 210 */ 211 public function regenerate_id($destroy=true) 212 { 213 session_regenerate_id($destroy); 214 213 215 $this->vars = false; 214 215 session_regenerate_id(false); 216 $this->key = session_id(); 216 $this->key = session_id(); 217 217 218 218 return true;
Note: See TracChangeset
for help on using the changeset viewer.
