Aleksander Machniak
2016-01-16 3f6fbdcc6d2ed2e5ad17f9ae4f7d2f4bb8a3104b
Fix random "access to this resource is secured against CSRF" message at logout (#1490641)
- this is when openssl module is not installed
2 files modified
3 ■■■■ changed files
CHANGELOG 1 ●●●● patch | view | raw | blame | history
program/lib/Roundcube/rcube_utils.php 2 ●●● patch | view | raw | blame | history
CHANGELOG
@@ -2,6 +2,7 @@
===========================
- Fix random "access to this resource is secured against CSRF" message at logout (#1490641)
- Fix missing language name in "Add to Dictionary" request in HTML mode (#1490634)
- Enable use of TLSv1.1 and TLSv1.2 for IMAP (#1490640)
program/lib/Roundcube/rcube_utils.php
@@ -1164,7 +1164,7 @@
            }
        }
        else {
            $alpha  = 'ABCDEFGHIJKLMNOPQERSTUVXYZabcdefghijklmnopqrtsuvwxyz0123456789+*%&?!$-_=';
            $alpha  = 'ABCDEFGHIJKLMNOPQERSTUVXYZabcdefghijklmnopqrtsuvwxyz0123456789,*.:?!$-_=';
            $random = '';
            for ($i = 0; $i < $length; $i++) {