archive/piwigo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

if php version is less than 7.0.3 and session_id exists do nothing

Browse source
This commit is contained in:
Nicolas 2016-02-10 12:37:12 +01:00
parent a35c7bdf18
commit 0909717c37
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
include/functions_user.inc.php
View file

@ -945,10 +945,13 @@ function log_user($user_id, $remember_me)
{ // make sure we clean any remember me ... { // make sure we clean any remember me ...
setcookie($conf['remember_me_name'], '', 0, cookie_path(),ini_get('session.cookie_domain')); setcookie($conf['remember_me_name'], '', 0, cookie_path(),ini_get('session.cookie_domain'));
} }
if ( session_id()!="" and (version_compare(PHP_VERSION, '7') <= 0 or version_compare(PHP_VERSION, '7.0.3') >= 0)) if ( session_id()!="" )
{ // we regenerate the session for security reasons { // we regenerate the session for security reasons
// see http://www.acros.si/papers/session_fixation.pdf // see http://www.acros.si/papers/session_fixation.pdf
session_regenerate_id(true); if ((version_compare(PHP_VERSION, '7') <= 0 or version_compare(PHP_VERSION, '7.0.3') >= 0))
{
session_regenerate_id(true);
}
} }
else else
{ {