5 Commits

Author	SHA1	Message	Date
andryyy	4ffa80a669	Remove ip from session check	2017-05-18 19:45:41 +02:00
Dennis Neufeld	0d3d9b8c15	Fix bug: Session cookie domain ... If the web domain is != mail domain, the session cookie is set to the wrong domain.	2017-05-16 19:46:24 +02:00
andryyy	e91c6916ab	CSRF protection	2017-05-15 11:37:12 +02:00
andryyy	49f28ecaf8	Destroy session when it becomes invalid	2017-05-14 21:53:08 +02:00
andryyy	3c937f75ba	Add OWASP CSRF Protector, add more secure session handling	2017-05-07 13:38:31 +02:00