Return "401 Unauthorized" status when login fails (#5663)

roundcube · Jun 26, 2017 · 2cb9de3 · 2cb9de3
1 parent 6dee73a
commit 2cb9de3
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,6 +1,7 @@
 CHANGELOG Roundcube Webmail
 ===========================
 
+- Return "401 Unauthorized" status when login fails (#5663)
 - Support both comma and semicolon as recipient separator, drop recipients_separator option (#5092)
 - Plugin API: Added 'show_bytes' hook (#5001)
 - subscriptions_option: show \\Noselect folders greyed out (#5621)

diff --git a/index.php b/index.php
@@ -245,6 +245,10 @@
 
     $RCMAIL->set_task($plugin['task']);
 
+    if (!$session_error) {
+        header('HTTP/1.0 401 Unauthorized');
+    }
+
     $OUTPUT->send($plugin['task']);
 }
 else {