lib/kolab_sync.php

Aleksander Machniak machniak at kolabsys.com
Fri Feb 1 09:54:51 CET 2013


 lib/kolab_sync.php |    6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

New commits:
commit c10f923f90c9e4762e809621c453c6e9d3a6eadc
Author: Aleksander Machniak <alec at alec.pl>
Date:   Fri Feb 1 09:54:12 2013 +0100

    For security reasons use per-user log for authenticated users only

diff --git a/lib/kolab_sync.php b/lib/kolab_sync.php
index c2cbc16..d8c7599 100644
--- a/lib/kolab_sync.php
+++ b/lib/kolab_sync.php
@@ -120,9 +120,6 @@ class kolab_sync extends rcube
                 }
             }
 
-            // Set log directory per-user
-            $this->set_log_dir($_SERVER['PHP_AUTH_USER']);
-
             // Authenticate the user
             $userid = $this->authenticate($_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW']);
         }
@@ -133,6 +130,9 @@ class kolab_sync extends rcube
             exit;
         }
 
+        // Set log directory per-user
+        $this->set_log_dir($_SERVER['PHP_AUTH_USER']);
+
         // Save user password for Roundcube Framework
         $this->password = $_SERVER['PHP_AUTH_PW'];
 





More information about the commits mailing list