RoundCube mail - disable CSRF protection on login example

roundcube_mail_disable_csrf_on_login.php

<?php
/*
Install:
1) create a folder: disablecsrf inside 'plugins/' directory.
2) place this file there and name it: disablecsrf.php
3) go to config/config.inc.php, and add it to plugins, like:
   $config['plugins'] = array('disablecsrf');

CSRF should now be disabled for login.
*/


/**
 * Sample plugin to disable csrf for RoundCube mail (tested only on 1.0.3)
 *
 * @license MIT
 * @author huglester@gmail.com
 */
class disablecsrf extends rcube_plugin
{
  public $task = 'login';

  function init()
  {
    $this->add_hook('authenticate', array($this, 'authenticate'));
  }

  function authenticate($args)
  {
    $args['valid'] = true;

    return $args;
  }

}

Thanks for plugin!
It works with v1.0.0

Life saver.

Awesome fix. Still has its use. Thanks!

Does this still work?

Huglester, what does this thing do? Don't you think it would be wise to include a brief description in the comments?

This should not be used in production. Now other websites can login for a particular user, potentially misleading them. There is a bug somewhere in Roundcube, this is a bad temporary workaround.