gnh1201/reasonableframework
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update security.php

Browse Source
This commit is contained in:
Namhyeon Go 2018-02-13 15:53:24 +09:00 committed by GitHub
parent ecaaf12de8
commit ebe42f1367
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
system/security.php
View File

@ -263,7 +263,7 @@ if(!function_exists("session_logout")) {
}
@unlink($config['session_dir'] . '/' . protect_dir_path($ss_key));
// 토큰이 지워졌는지 화인
$abuse = check_token_abuse($ss_user_name, get_session("ss_user_name"));
$abuse = ($abuse && check_token_abuse($ss_key, get_session("ss_key")));
@ -274,3 +274,21 @@ if(!function_exists("session_logout")) {
return $flag;
}
}
if(!function_exists("check_current_user_name")) {
function check_current_user_name() {
$current_user_name = "";
$ss_user_name = get_session("ss_user_name");
$ss_key = get_session("ss_key");
$abuse = check_token_abuse($ss_user_name, $ss_user_name); // self check
$abuse = ($abuse && check_token_abuse($ss_key, $ss_key)); // self check
if(!$abuse) {
$current_user_name = $ss_user_name;
}
return $current_user_name;
}
}