Hi,

Whenever someone adds an adddressbook entry, they loose the session and end up with a login screen in the box. I noticed the following:

// add framed parameter
if ($_framed)
{
$COMM_PATH .= '&_framed=1';
$SESS_HIDDEN_FIELD = "\n".'<input type="hidden" name="_framed" value="1" />';
}

If I change the value to this, it solves the problem.

$SESS_HIDDEN_FIELD = sprintf('<input type="hidden" name="_auth" value="%s" />', $sess_auth);

I think the problem is that if it doesn't get the auth id when its framed, it can't look up the "changed" value correctly in the database for how long as elapsed and thinks the session has timed out. Comments?

Thanks,
Stephen Blackstone