Systems: PHP 5.6.33 SQM 1.4.22 and 1.4.23 Apache2 2.4.10 OS: Debian-Jessie IMAP Server: dovecot
Web-browser: Firefox or Safari on Mac OSX 10.12.6: cookies and javascript enabled.
Symptom: "You must be logged in to access this page" when a login is attempted.
Problem: auth.php line 69 if (sqsession_is_registered('user_is_logged_in') fails.
But redirect.php line 129 sqsession_register ($user_is_logged_in, 'user_is_logged_in') has executed.
Also insert this in webmail.php:
if (sqsession_is_resistered('user_is_logged_in)) {
syslog(LOG_ERR,"user really is logged in");
}
require_once(SM_PATH . 'include/validate.php');
and the correct message is placed in /var/log/user.log
Conclusion: the variable $user_is_logged_in is found in $-SESSION in webmail.php but is missing in auth.php which is called by is_logged_in() on line 52 in validate.php
Question: how/when is the $user_is_logged_in variable emptied/destroyed? It is supposed to be a superglobal?
Hello and thanks for reporting this, and I'm sorry notification for this bug didn't seem to work, so this was overlooked. If you are still experiencing this issue, please respond and we can debug the issue together.