| | |
| | | /* |
| | | +-------------------------------------------------------------------------+ |
| | | | Roundcube Webmail IMAP Client | |
| | | | Version 1.0-git | |
| | | | Version 1.1-git | |
| | | | | |
| | | | Copyright (C) 2005-2013, The Roundcube Dev Team | |
| | | | Copyright (C) 2005-2014, The Roundcube Dev Team | |
| | | | | |
| | | | This program is free software: you can redistribute it and/or modify | |
| | | | it under the terms of the GNU General Public License (with exceptions | |
| | |
| | | |
| | | // Make the whole PHP output non-cacheable (#1487797) |
| | | $RCMAIL->output->nocacheing_headers(); |
| | | $RCMAIL->output->common_headers(); |
| | | |
| | | // turn on output buffering |
| | | ob_start(); |
| | |
| | | } |
| | | |
| | | // check session and auth cookie |
| | | else if ($RCMAIL->task != 'login' && $_SESSION['user_id'] && $RCMAIL->action != 'send') { |
| | | else if ($RCMAIL->task != 'login' && $_SESSION['user_id']) { |
| | | if (!$RCMAIL->session->check_auth()) { |
| | | $RCMAIL->kill_session(); |
| | | $session_error = true; |
| | |
| | | $OUTPUT->show_message('sessionerror', 'error', null, true, -1); |
| | | } |
| | | |
| | | if ($OUTPUT->ajax_call || !empty($_REQUEST['_framed'])) { |
| | | if ($OUTPUT->ajax_call || $OUTPUT->framed) { |
| | | $OUTPUT->command('session_error', $RCMAIL->url(array('_err' => 'session'))); |
| | | $OUTPUT->send('iframe'); |
| | | } |