summaryrefslogtreecommitdiff
path: root/program/include/rcube_session.php
diff options
context:
space:
mode:
authorthomascube <thomas@roundcube.net>2011-02-03 22:08:03 +0000
committerthomascube <thomas@roundcube.net>2011-02-03 22:08:03 +0000
commit784a425e07f8b249b44137eadfe2a5dfe436aaeb (patch)
treef20c33632b6e0f69319601c78dd86b70291d92da /program/include/rcube_session.php
parent6ec4658f7230424245a6441fc910108866be26ab (diff)
protect login form submission from CSRF using a request token
Diffstat (limited to 'program/include/rcube_session.php')
-rw-r--r--program/include/rcube_session.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/program/include/rcube_session.php b/program/include/rcube_session.php
index 7384af39c..2bd663c83 100644
--- a/program/include/rcube_session.php
+++ b/program/include/rcube_session.php
@@ -253,6 +253,7 @@ class rcube_session
*/
public function kill()
{
+ $this->vars = false;
$this->destroy(session_id());
rcmail::setcookie($this->cookiename, '-del-', time() - 60);
}