banananetwork
/
roundcubemail
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Secure the other cookie, too.

Browse Source
release-0.6
svncommit 16 years ago
parent d0b973cf6a
commit 72d25b1159
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File

3
program/include/rcmail.php
Unescape Escape View File

@ -728,7 +728,8 @@ class rcmail
if (!$valid || ($_SERVER['REQUEST_METHOD']!='POST' && $now - $_SESSION['auth_time'] > 300)) { if (!$valid || ($_SERVER['REQUEST_METHOD']!='POST' && $now - $_SESSION['auth_time'] > 300)) {
$_SESSION['last_auth'] = $_SESSION['auth_time']; $_SESSION['last_auth'] = $_SESSION['auth_time'];
$_SESSION['auth_time'] = $now; $_SESSION['auth_time'] = $now;
setcookie('sessauth', $this->get_auth_hash(session_id(), $now)); setcookie('sessauth', $this->get_auth_hash(session_id(), $now), '/',
$_SERVER['HTTPS'] && ($_SERVER['HTTPS']!='off'));
} }
} }
else { else {

Write Preview
Loading…
Cancel
Save