Accept two past time slots for auth cookie validation; don't encode user-ag...

thomascube

2012-04-30 58154f59fc16322598e3a01937fbffdb97cdf62b

 program/include/rcube.php

@@ -476,7 +476,7 @@
            $this->session->set_keep_alive($keep_alive);
        }

        $this->session->set_secret($this->config->get('des_key') . $_SERVER['HTTP_USER_AGENT']);
        $this->session->set_secret($this->config->get('des_key') . dirname($_SERVER['SCRIPT_NAME']));
        $this->session->set_ip_check($this->config->get('ip_check'));
    }