<h2>Editing File: /usr/local/cpanel/base/3rdparty/roundcube/plugins/autologout/autologout.php</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php

/**
 * Plugin to auto log out users with a POST request sent from an external site.
 *
 * @license GNU GPLv3+
 * @author  Cover Tower LLC
 *
 * First enable this plugin by setting $config['plugins'] = array(..., 'autologout')
 * in the Roundcube configuration file (config.inc.php). To use it, embed
 * a form like the following in a web page:
 *
 * &lt;form id=&quot;rcLogoutForm&quot; method=&quot;POST&quot; action=&quot;https://mail.example.com/&quot;&gt;
 * &lt;input type=&quot;hidden&quot; name=&quot;_action&quot; value=&quot;logout&quot; /&gt;
 * &lt;input type=&quot;hidden&quot; name=&quot;_task&quot; value=&quot;logout&quot; /&gt;
 * &lt;input type=&quot;hidden&quot; name=&quot;_autologout&quot; value=&quot;1&quot; /&gt;
 * &lt;input id=&quot;loSubmitButton&quot; type=&quot;submit&quot; value=&quot;Logout&quot; /&gt;
 * &lt;/form&gt;
 *
 * This plugin won't work if the POST request is made using CURL or other
 * methods. It will only work if the POST request is made by submitting a
 * form similar to the one from above. The form can be hidden and it can
 * be sent automatically using JavaScript or JQuery (for example by using:
 * $(&quot;#loSubmitButton&quot;).click();)
 */

class autologout extends rcube_plugin
{
    public $task = 'logout';

    /**
     * Plugin initialization
     */
    public function init()
    {
        $this-&gt;add_hook('startup', [$this, 'startup']);
    }

    /**
     * Request handler
     */
    public function startup($args)
    {
        $rcmail = rcmail::get_instance();

        // Change task and action to logout
        if (!empty($_SESSION['user_id']) &amp;&amp; !empty($_POST['_autologout']) &amp;&amp; $this-&gt;known_client()) {
            $rcmail-&gt;logout_actions();
            $rcmail-&gt;kill_session();
        }

        return $args;
    }

    /**
     * Checks if the request came from an allowed client IP
     */
    private function known_client()
    {
        /*
         * If you want to restrict the use of this plugin to specific
         * remote clients, you can verify the remote client's IP like this:
         *
         * return in_array(rcube_utils::remote_addr(), ['123.123.123.123', '124.124.124.124']);
         */

        return true;
    }
}
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fcpanel%2Fbase%2F3rdparty%2Froundcube%2Fplugins%2Fautologout'>Back to Directory</a>