Unable to create session

[ozalpmurat]

I tried to navigate through the HTML. The roundcube seems to have successfully logged in to the log file. But the session can not be opened. There is an empty login page via WEB. There are two logon records below. Both were requested from the same client computer (10.9.9.3).

[2018-04-06 14:29:52 +0300]: <j5qr0nhq> Successful login for [email protected] (ID: 14) from 192.168.120.5 in session j5qr0nhqsm38ijda5avj8q4tr1
[2018-04-06 14:30:39 +0300]: <cq0m771k> Successful login for [email protected] (ID: 14) from 10.9.9.3 in session cq0m771ktpge1t6i8ki2aabpl3

The first record belongs to the request made via AutoLogin. The second line belongs to the original RoundCube login page. In the first record, the server's own IP address (192.168.120.5) appears as the requestor.

Can you help me?

[mckaygerhard]

curerntly the pluygin only works untel 1.3.x , the problem is that RC 1.4 now send an id check. its like that part you see &_token=dB0repI9g0gCCdsyuOisO5x5UZuDihSD so this must mach of the generation pre send of the data.. previous releases of RC does not have that security part, please check issue #6 to a insecure hack and #9