Merge pull request #1558 from xisi/security-invalidsession-fix
[FIX] Invalid session regeneration
This commit is contained in:
commit
207a8719fd
@ -36,7 +36,7 @@ $master_template = 'master.tpl';
|
||||
|
||||
// Start a session
|
||||
session_set_cookie_params(time()+$config['cookie']['duration'], $config['cookie']['path'], $config['cookie']['domain'], $config['cookie']['secure'], $config['cookie']['httponly']);
|
||||
@$session_start = session_start();
|
||||
$session_start = @session_start();
|
||||
if (!$session_start) {
|
||||
session_regenerate_id(true);
|
||||
session_start();
|
||||
|
||||
Loading…
Reference in New Issue
Block a user