I updated my local development branch to the current trunk release, and I noticed an odd change with one of my plugins. The plugin was developed to keep the prying eyes of the public away from the at times unstable development branch of roundcube that I am using. The following is the paraphrased version of the plugin:
class foobar extends rcube_plugin { function init() { $this->add_hook('list_mailboxes', array($this, 'check_access')); }
function check_access($args) { $rcmail = rcmail::get_instance(); list ($uid, $host) = split("@", $rcmail->user->get_username()); if ( !in_array($uid, $this->allow_list)) { $rcmail->output->command('display_message', $this->gettext('unauth'), 'error'); $rcmail->logout_actions(); $rcmail->kill_session(); } return $args; }
}
What changed is that the forced logout action no longer occurs. Any insight into why?