Fix vulnerability in handling _session argument of utils/save-prefs (#1489382)

Aleksander Machniak

2013-10-17 197203727417a03d87053a47e5aa5175a76e3e0b

 program/lib/Auth/SASL.php

@@ -75,6 +75,11 @@
                $classname = 'Auth_SASL_Plain';
                break;

            case 'external':
                $filename  = 'Auth/SASL/External.php';
                $classname = 'Auth_SASL_External';
                break;

            case 'crammd5':
                $filename  = 'Auth/SASL/CramMD5.php';
                $classname = 'Auth_SASL_CramMD5';
@@ -91,8 +96,9 @@
        }

        require_once($filename);
        return new $classname();
        $obj = new $classname();
        return $obj;
    }
}

?>
?>