Accept two past time slots for auth cookie validation; don't encode user-ag...

thomascube

2012-04-30 9e8d8e4a06fda84d0c1c295890478daee3a67dd2

 program/include/rcmail.php

@@ -802,7 +802,7 @@
      $this->session->set_keep_alive($keep_alive);
    }

    $this->session->set_secret($this->config->get('des_key') . $_SERVER['HTTP_USER_AGENT']);
    $this->session->set_secret($this->config->get('des_key') . dirname($_SERVER['SCRIPT_NAME']));
    $this->session->set_ip_check($this->config->get('ip_check'));
  }