[Serusers] hijack another account

[Andreas Granig]

kcassidy at kakelma.mine.nu wrote:
>   This only checks the REGISTER method.  I think we need something to 
> check the URI in the INVITE method whether it's fake or not.  Just my 2 
> cents.

if(method == "INVITE" && proxy_authorize(...))
{
   if(!check_from())
   {
     # from-user != authorized user
   }
   # proceed as usual here...
}

should do it.

Andy