diff options
| author | thomasb <thomasb@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2007-08-13 20:15:27 +0000 |
|---|---|---|
| committer | thomasb <thomasb@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2007-08-13 20:15:27 +0000 |
| commit | 10b95da1ed18f629c3146cc2e18fffc1ba61fe2a (patch) | |
| tree | 8d7a2046df3f988f238eede92c30df690d6faab9 /roundcubemail/index.php | |
| parent | d2131a9fafcfe5a3ec36792616d1896fb94a9ca9 (diff) | |
Fix bugs introduced with latest changes
git-svn-id: https://svn.roundcube.net/trunk@675 208e9e7b-5314-0410-a742-e7e81cd9613c
Diffstat (limited to 'roundcubemail/index.php')
| -rw-r--r-- | roundcubemail/index.php | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/roundcubemail/index.php b/roundcubemail/index.php index 6e8b7ffa8..34b5f8b26 100644 --- a/roundcubemail/index.php +++ b/roundcubemail/index.php @@ -221,8 +221,7 @@ if (empty($_SESSION['user_id'])) // check client X-header to verify request origin if ($OUTPUT->ajax_call) { - $hdrs = getallheaders(); - if (empty($hdrs['X-RoundCube-Referer']) && empty($CONFIG['devel_mode'])) + if (empty($CONFIG['devel_mode']) && !rc_request_header('X-RoundCube-Referer')) { header('HTTP/1.1 404 Not Found'); die("Invalid Request"); |