Aleksander Machniak 9 years ago
parent c7c09f85d9
commit 9953d5c10c

@ -1,6 +1,7 @@
CHANGELOG Roundcube Webmail
===========================
- Add workaround for https://bugs.php.net/bug.php?id=70757 (#1490582)
- Fix duplicate messages in list and wrong count after delete (#1490572)
- Fix so Installer requires PHP5
- Make brute force attacks harder by re-generating security token on every failed login (#1490549)

@ -524,8 +524,13 @@ class rcube
// use database for storing session data
$this->session = new rcube_session($this->get_dbh(), $this->config);
$path = $_SERVER['SCRIPT_NAME'];
if (strpos($path, '://')) {
$path = parse_url($path, PHP_URL_PATH); // #1490582
}
$this->session->register_gc_handler(array($this, 'gc'));
$this->session->set_secret($this->config->get('des_key') . dirname($_SERVER['SCRIPT_NAME']));
$this->session->set_secret($this->config->get('des_key') . dirname($path));
$this->session->set_ip_check($this->config->get('ip_check'));
if ($this->config->get('session_auth_name')) {

Loading…
Cancel
Save