Explorar el Código

Session fix when form + HTTP auth are used (#2286)

https://github.com/Alkarex/FreshRSS/commit/bf51c82d55f6bf1af2a6464ca4f148d6c613d28f
https://github.com/FreshRSS/FreshRSS/issues/2125#issuecomment-473873922
Alexandre Alapetite hace 7 años
padre
commit
e84a90943a
Se han modificado 1 ficheros con 1 adiciones y 1 borrados
  1. 1 1
      app/Models/Auth.php

+ 1 - 1
app/Models/Auth.php

@@ -13,7 +13,7 @@ class FreshRSS_Auth {
 	 * This method initializes authentication system.
 	 * This method initializes authentication system.
 	 */
 	 */
 	public static function init() {
 	public static function init() {
-		if (Minz_Session::param('REMOTE_USER', '') !== httpAuthUser()) {
+		if (isset($_SESSION['REMOTE_USER']) && $_SESSION['REMOTE_USER'] !== httpAuthUser()) {
 			//HTTP REMOTE_USER has changed
 			//HTTP REMOTE_USER has changed
 			self::removeAccess();
 			self::removeAccess();
 		}
 		}