Return "401 Unauthorized" status when login fails (#5663)

7 years ago · 2cb9de358b
parent 6dee73a0ec
commit 2cb9de358b
2 changed files with 5 additions and 0 deletions
--- a/1
+++ b/1
@ -1,6 +1,7 @@
 CHANGELOG Roundcube Webmail
 ===========================

+- Return "401 Unauthorized" status when login fails (#5663)
 - Support both comma and semicolon as recipient separator, drop recipients_separator option (#5092)
 - Plugin API: Added 'show_bytes' hook (#5001)
 - subscriptions_option: show \\Noselect folders greyed out (#5621)
--- a/index.php
+++ b/index.php
@ -245,6 +245,10 @@ if (empty($RCMAIL->user->ID)) {

    $RCMAIL->set_task($plugin['task']);

+    if (!$session_error) {
+        header('HTTP/1.0 401 Unauthorized');
+    }
+
    $OUTPUT->send($plugin['task']);
 }
 else {