public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-13 23:25:56 +00:00
Code Issues Releases Wiki Activity

another attempt to enforce session ID regeneration on login

Browse Source
This commit is contained in:
Andrew Dolgov
2018-10-16 09:11:32 +03:00
parent 9dadbdbb21
commit f730d7bb0a
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
include/functions.php
View File

@@ -714,9 +714,11 @@
if ($user_id && !$check_only) {
/* if a session is started here there's a stale login cookie we need to clean */
if (session_status() != PHP_SESSION_NONE) {
session_destroy();
session_commit();
$_SESSION["login_error_msg"] = __("Stale session cookie found, try logging in again");
return false;
}
session_regenerate_id(true);