Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)

Aleksander Machniak

2013-10-17 037af6890fe6fdb84a08d3c86083e847c90ec0ad

 plugins/password/drivers/sasl.php

@@ -20,7 +20,7 @@
{
    function save($currpass, $newpass)
    {
        $curdir   = INSTALL_PATH . 'plugins/password/helpers';
        $curdir   = RCUBE_PLUGINS_DIR . 'password/helpers';
        $username = escapeshellcmd($_SESSION['username']);
        $args     = rcmail::get_instance()->config->get('password_saslpasswd_args', '');