Merge pull request #1558 from xisi/security-invalidsession-fix

[FIX] Invalid session regeneration
This commit is contained in:
Sebastian Grewe 2014-01-23 11:52:00 -08:00
commit 207a8719fd

View File

@ -36,7 +36,7 @@ $master_template = 'master.tpl';
// Start a session
session_set_cookie_params(time()+$config['cookie']['duration'], $config['cookie']['path'], $config['cookie']['domain'], $config['cookie']['secure'], $config['cookie']['httponly']);
@$session_start = session_start();
$session_start = @session_start();
if (!$session_start) {
session_regenerate_id(true);
session_start();