A.L.E.C wrote:
> till wrote:
> 
>> I read the thread and I never noticed this error before. Does this
>> happen when you use RoundCube in multiple tabs? Is that the catch?
> 
> I was thinking if we can get rid of $_SESSION for mail composing. It's 
> possible and should prevent from multitabs and session issues, but will 
> require to sent real saved attachment filenames to the client. It'd to 
> be some secure issue?

As long as you still store all of them in an session array and validate 
client values against the server-side list I don't think this is an issue.

Best regards,

Michael

-- 
Michael Baierl
<http://mbaierl.com/blog/>
- - - - - - - - - - - - - - - - -
"Die große Mehrzahl unserer Importe kommt von außerhalb des Landes." 
George W. Bush

_______________________________________________
List info: http://lists.roundcube.net/dev/

Reply via email to