Hi,

I was just doing a general security review and saw this: http://drupal.org/node/218104

It says that modules should implement session_save_session(FALSE); before "impersonating another user" and session_save_session(TRUE); after returning to the original user. Should mailhandler implement this in the mailhandler_retrieve function?

Best,
Chad

Comments

moshe weitzman’s picture

moshe weitzman commented
Status: Active » Fixed

committed. thx.

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.