diff options
author | thomascube <thomas@roundcube.net> | 2007-08-13 20:15:27 +0000 |
---|---|---|
committer | thomascube <thomas@roundcube.net> | 2007-08-13 20:15:27 +0000 |
commit | 88f66ec89cf87328536757ac33e508a9614bdc09 (patch) | |
tree | 9cf780128deed4c714a6e74c38e4b790317082ae /index.php | |
parent | 8810b6db0f7ea63313e660203b8519a6ea98e5be (diff) |
Fix bugs introduced with latest changes
Diffstat (limited to 'index.php')
-rw-r--r-- | index.php | 3 |
1 files changed, 1 insertions, 2 deletions
@@ -221,8 +221,7 @@ if (empty($_SESSION['user_id'])) // check client X-header to verify request origin if ($OUTPUT->ajax_call) { - $hdrs = getallheaders(); - if (empty($hdrs['X-RoundCube-Referer']) && empty($CONFIG['devel_mode'])) + if (empty($CONFIG['devel_mode']) && !rc_request_header('X-RoundCube-Referer')) { header('HTTP/1.1 404 Not Found'); die("Invalid Request"); |