[Tickets #4005] NEW: redirect.php - bug

Mon Jun 5 08:54:14 PDT 2006

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=4005
-----------------------------------------------------------------------
 Ticket             | 4005
 Created By         | maciej.niemir at ilim.poznan.pl
 Summary            | redirect.php - bug
 Queue              | IMP
 Version            | 4.1.1
 State              | Unconfirmed
 Priority           | 1. Low
 Type               | Bug
 Owners             | 
-----------------------------------------------------------------------

maciej.niemir at ilim.poznan.pl (2006-06-05 08:54) wrote:

In redirect.php should be:

    if (($imapuser !== null && ($imapuser !== $_SESSION['imp']['user'])) &&
        ($pass !== null && ($pass !== Secret::read(Secret::getKey('imp'),
$_SESSION['imp']['pass'])))) {

        /* Disable the old session. */
        unset($_SESSION['imp']);
        _redirect(Auth::addLogoutParameters(IMP::logoutUrl(),
AUTH_REASON_FAILED));
    }