gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-05-11 20:21:16 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

check if user is valid before using it

Browse Source
This commit is contained in:
Uwe Steinmann 2015-07-14 21:34:51 +02:00
parent bdfb552204
commit f616c6cf39
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
inc/inc.Authentication.php
View File

@ -69,6 +69,12 @@ if (!isset($_COOKIE["mydms_session"])) {
/* Load user data */
$user = $dms->getUser($resArr["userID"]);
if (!is_object($user)) {
setcookie("mydms_session", $dms_session, time()-3600, $settings->_httpRoot); //delete cookie
header("Location: " . $settings->_httpRoot . "out/out.Login.php?referuri=".$refer);
exit;
}
if($user->isAdmin()) {
if($resArr["su"]) {
$user = $dms->getUser($resArr["su"]);
@ -76,11 +82,6 @@ if (!isset($_COOKIE["mydms_session"])) {
$session->resetSu();
}
}
if (!is_object($user)) {
setcookie("mydms_session", $dms_session, time()-3600, $settings->_httpRoot); //delete cookie
header("Location: " . $settings->_httpRoot . "out/out.Login.php?referuri=".$refer);
exit;
}
$theme = $resArr["theme"];
$lang = $resArr["language"];
}