diff options
Diffstat (limited to 'program/include/main.inc')
-rw-r--r-- | program/include/main.inc | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/program/include/main.inc b/program/include/main.inc index efac8b2d2..b7f28c4e4 100644 --- a/program/include/main.inc +++ b/program/include/main.inc @@ -170,9 +170,9 @@ function rcmail_authenticate_session() { $now = mktime(); $valid = ($_COOKIE['sessauth'] == rcmail_auth_hash(session_id(), $_SESSION['auth_time'])); - - // renew auth cookie every 5 minutes - if (!$valid || ($now-$_SESSION['auth_time'] > 300)) + + // renew auth cookie every 5 minutes (only for GET requests) + if (!$valid || ($_SERVER['REQUEST_METHOD']!='POST' && $now-$_SESSION['auth_time'] > 300)) { $_SESSION['auth_time'] = $now; setcookie('sessauth', rcmail_auth_hash(session_id(), $now)); |