| | |
| | | |
| | | // Make the whole PHP output non-cacheable (#1487797) |
| | | $RCMAIL->output->nocacheing_headers(); |
| | | $RCMAIL->output->common_headers(); |
| | | |
| | | // turn on output buffering |
| | | ob_start(); |
| | |
| | | } |
| | | |
| | | // check session and auth cookie |
| | | else if ($RCMAIL->task != 'login' && $_SESSION['user_id'] && $RCMAIL->action != 'send') { |
| | | else if ($RCMAIL->task != 'login' && $_SESSION['user_id']) { |
| | | if (!$RCMAIL->session->check_auth()) { |
| | | $RCMAIL->kill_session(); |
| | | $session_error = true; |
| | |
| | | $OUTPUT->show_message('sessionerror', 'error', null, true, -1); |
| | | } |
| | | |
| | | if ($OUTPUT->ajax_call || !empty($_REQUEST['_framed'])) { |
| | | if ($OUTPUT->ajax_call || $OUTPUT->framed) { |
| | | $OUTPUT->command('session_error', $RCMAIL->url(array('_err' => 'session'))); |
| | | $OUTPUT->send('iframe'); |
| | | } |