Opened 4 years ago

Closed 4 years ago

#1485922 closed Bugs (fixed)

Cookie check in index.php mis-placed?

Reported by: rosali Owned by:
Priority: 5 Milestone: 0.3-stable
Component: Core functionality Version: 0.2.1
Severity: minor Keywords:
Cc:

Description

I experienced problems caused by the cookie check in line 84 of index.php when trying to login from an external form on a different domain. The external app where I try to get an integrated login does not use cookies.

Attachments (1)

autologin.zip (2.9 KB) - added by lacri 4 years ago.

Download all attachments as: .zip

Change History (4)

Changed 4 years ago by lacri

comment:1 Changed 4 years ago by lacri

in my case the cookie check only works when i set the cookie with

$_COOKIE['roundcube_sessid'] = session_id();

in the startup hook

i have tested with the autologin plugin based on autologon sample plugin otherwise roundcube tell me thats my browser cookies not akzepted.


comment:2 Changed 4 years ago by thomasb

  • Severity changed from normal to minor

Fixing this would mean that regular logins will just fail without this specific warning if one really has cookies disabled.

comment:3 Changed 4 years ago by thomasb

  • Resolution set to fixed
  • Status changed from new to closed

The problem with external logins can be solved using the 'authenticate' plugin hook. Check for referrer and disable cookiecheck.

Note: See TracTickets for help on using tickets.