diff options
| author | thomascube <thomas@roundcube.net> | 2012-04-30 21:04:53 +0000 |
|---|---|---|
| committer | Aleksander Machniak <alec@alec.pl> | 2012-05-08 12:05:27 +0200 |
| commit | 9e8d8e4a06fda84d0c1c295890478daee3a67dd2 (patch) | |
| tree | 91ae2cc341fed9402c2b1b8bd68c7c897d212ec7 /program/include/rcmail.php | |
| parent | f5a262f0f020908a7b93ce24572ff35ac5df4c10 (diff) | |
Accept two past time slots for auth cookie validation; don't encode user-agent into session auth hash (#1488449)
Conflicts:
program/include/rcube.php
Diffstat (limited to 'program/include/rcmail.php')
| -rw-r--r-- | program/include/rcmail.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/program/include/rcmail.php b/program/include/rcmail.php index eec3dd27f..8988bdc13 100644 --- a/program/include/rcmail.php +++ b/program/include/rcmail.php @@ -802,7 +802,7 @@ class rcmail $this->session->set_keep_alive($keep_alive); } - $this->session->set_secret($this->config->get('des_key') . $_SERVER['HTTP_USER_AGENT']); + $this->session->set_secret($this->config->get('des_key') . dirname($_SERVER['SCRIPT_NAME'])); $this->session->set_ip_check($this->config->get('ip_check')); } |