public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2026-02-10 16:01:33 +00:00
Code Issues Releases Wiki Activity

force regenerate session id on successful login, remove previous blank SID check

Browse Source
This commit is contained in:
Andrew Dolgov
2018-10-15 15:47:50 +03:00
parent 74736fce0f
commit 65e98f4086
3 changed files with 12 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
include/functions.php
View File

@@ -712,7 +712,14 @@
}
if ($user_id && !$check_only) {
@session_start();
if (session_status() != PHP_SESSION_NONE) {
session_destroy();
session_commit();
}
session_start();
session_regenerate_id(true);
$_SESSION["uid"] = $user_id;
$_SESSION["version"] = VERSION_STATIC;

4
include/sessions.php
View File

@@ -160,9 +160,5 @@
if (!defined('NO_SESSION_AUTOSTART')) {
if (isset($_COOKIE[session_name()])) {
@session_start();
if (!$_SESSION['uid']) {
logout_user();
}
}
}