I didn't like the AUTH hash being public in the URL, so I make now
store it in a session in my installation. Here is a diff on
index.php, apply it if you like.
--
Eddie Tejeda
diff roundcubemail-0.1-20051021/index.php roundcubemail/index.php
79c79
< $_auth = !empty($_POST['_auth']) ? $_POST['_auth'] : $_GET['_auth'];
---
> $_auth = !empty($_POST['_auth']) ? $_POST['_auth'] : $_SESSION
['_auth'];
91,92c91,92
< $COMM_PATH = sprintf('./?_auth=%s&_task=%s', $sess_auth, $_task);
< $SESS_HIDDEN_FIELD = sprintf('<input type="hidden" name="_auth"
value="%s" />', $sess_auth);
---
> $COMM_PATH = sprintf('./?_task=%s', $_task);
> //$SESS_HIDDEN_FIELD = sprintf('<input type="hidden" name="_auth"
value="%s" />', $sess_auth);
125a126
> $_SESSION['_auth'] = $sess_auth;
263a265
>