Make session auth cookie name configurable

2 files changed, 7 insertions, 0 deletions

diff --git a/config/defaults.inc.php b/config/defaults.inc.php
index eedb816e2..f48827eb9 100644
--- a/config/defaults.inc.php
+++ b/config/defaults.inc.php
@@ -294,6 +294,9 @@ $config['session_domain'] = '';
 // Session name. Default: 'roundcube_sessid'
 $config['session_name'] = null;
 
+// Session authentication cookie name. Default: 'roundcube_sessauth'
+$config['session_auth_name'] = null;
+
 // Session path. Defaults to PHP session.cookie_path setting.
 $config['session_path'] = null;
 
diff --git a/program/lib/Roundcube/rcube.php b/program/lib/Roundcube/rcube.php
index e0f889a87..fbf9540ad 100644
--- a/program/lib/Roundcube/rcube.php
+++ b/program/lib/Roundcube/rcube.php
@@ -467,6 +467,10 @@ class rcube
         $this->session->set_secret($this->config->get('des_key') . dirname($_SERVER['SCRIPT_NAME']));
         $this->session->set_ip_check($this->config->get('ip_check'));
 
+        if ($this->config->get('session_auth_name')) {
+            $this->session->set_cookiename($this->config->get('session_auth_name'));
+        }
+
         // start PHP session (if not in CLI mode)
         if ($_SERVER['REMOTE_ADDR']) {
             $this->session->start();