- Fix authentication when submitting form with existing session (#1485679)

2 files changed, 5 insertions, 0 deletions

diff --git a/CHANGELOG b/CHANGELOG
index 492a3da01..f9ce6de9f 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -5,6 +5,7 @@ CHANGELOG RoundCube Webmail
 ----------
 - Fix problems with backslash as IMAP hierarchy delimiter (#1484467)
 - Secure vcard export by getting rid of preg's 'e' modifier use (#1485689)
+- Fix authentication when submitting form with existing session (#1485679)
 
 2009/01/15 (alec)
 ----------
diff --git a/index.php b/index.php
index d57c91ea9..172d57c88 100644
--- a/index.php
+++ b/index.php
@@ -72,6 +72,10 @@ if ($RCMAIL->action=='error' && !empty($_GET['_code'])) {
 
 // try to log in
 if ($RCMAIL->action=='login' && $RCMAIL->task=='mail') {
+  // purge the session in case of new login when a session already exists 
+  $RCMAIL->kill_session(); 
+  
+  // set IMAP host
   $host = $RCMAIL->autoselect_host();
   
   // check if client supports cookies