From f01ada9377a36a3acbc06994faca35c3aa5e7555 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 12 Dec 2025 16:30:39 +0000 Subject: [PATCH] Add isset check for DEV_MODE to prevent undefined index Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com> --- data/web/inc/sessions.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/data/web/inc/sessions.inc.php b/data/web/inc/sessions.inc.php index 18d9d1727..8486c75b8 100644 --- a/data/web/inc/sessions.inc.php +++ b/data/web/inc/sessions.inc.php @@ -139,7 +139,7 @@ function session_check() { if (!isset($_SESSION['SESS_REMOTE_UA']) || ($_SESSION['SESS_REMOTE_UA'] != $_SERVER['HTTP_USER_AGENT'])) { // In development mode, allow User-Agent changes (e.g., for responsive testing in dev tools) // Validate UA is not empty and has reasonable length (most UAs are under 200 chars, 500 is safe upper limit) - if ($GLOBALS['DEV_MODE'] && isset($_SESSION['SESS_REMOTE_UA']) && !empty($_SERVER['HTTP_USER_AGENT']) && strlen($_SERVER['HTTP_USER_AGENT']) < 500) { + if (isset($GLOBALS['DEV_MODE']) && $GLOBALS['DEV_MODE'] && isset($_SESSION['SESS_REMOTE_UA']) && !empty($_SERVER['HTTP_USER_AGENT']) && strlen($_SERVER['HTTP_USER_AGENT']) < 500) { $_SESSION['SESS_REMOTE_UA'] = $_SERVER['HTTP_USER_AGENT']; return true; }