Fix random "access to this resource is secured against CSRF" message at logout (#1490641)

- this is when openssl module is not installed
9 years ago · 3f6fbdcc6d
parent db76c50a7c
commit 3f6fbdcc6d
2 changed files with 2 additions and 1 deletions
--- a/1
+++ b/1
@ -2,6 +2,7 @@ CHANGELOG Roundcube Webmail
 ===========================


+- Fix random "access to this resource is secured against CSRF" message at logout (#1490641)
 - Fix missing language name in "Add to Dictionary" request in HTML mode (#1490634)
 - Enable use of TLSv1.1 and TLSv1.2 for IMAP (#1490640)

--- a/program/lib/Roundcube/rcube_utils.php
+++ b/program/lib/Roundcube/rcube_utils.php
@ -1164,7 +1164,7 @@ class rcube_utils
            }
        }
        else {
-            $alpha  = 'ABCDEFGHIJKLMNOPQERSTUVXYZabcdefghijklmnopqrtsuvwxyz0123456789+*%&?!$-_=';
+            $alpha  = 'ABCDEFGHIJKLMNOPQERSTUVXYZabcdefghijklmnopqrtsuvwxyz0123456789,*.:?!$-_=';
            $random = '';

            for ($i = 0; $i < $length; $i++) {