paxton
/
mailcow
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Destroy session when it becomes invalid

master
andryyy 2017-05-14 21:53:08 +02:00
parent 3ab77b1303
commit 49f28ecaf8
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
data/web/inc/sessions.inc.php
View File

@ -54,5 +54,9 @@ function session_check() {
return true; return true;
} }
if (isset($_SESSION['mailcow_cc_role']) && session_check() === false) { if (isset($_SESSION['mailcow_cc_role']) && session_check() === false) {
exit("Invalid session"); session_regenerate_id(true);
session_unset();
session_destroy();
session_write_close();
header("Location: /");
} }