The cookie part. session_start and session_regenerate_session normally set

their own cookie. SquirrelMail sets another cookie which overwites the php cookies. The sqsetcookie function sets the cookie by using the header function which gives us full control how the cookie is set. We do that to add the HttpOnly cookie attribute which blocks javascript access on IE6 SP1. sqsetcookieflush is needed to send out the headers. sqsetcookie caches the cookies to be send. If we don't do that we only can send 1 single cookie which is not sufficient.

• $str
• $debug