Преглед на файлове

If $_GET['id_session'] is set to 0 then delete the chamilo session

See BT#14799
Julio Montoya преди 6 години
родител
ревизия
1e6db66419
променени са 1 файла, в които са добавени 2 реда и са изтрити 2 реда
  1. 2 2
      main/inc/local.inc.php

+ 2 - 2
main/inc/local.inc.php

@@ -944,12 +944,12 @@ if (!isset($_SESSION['login_as'])) {
     }
 }
 
-$sessionIdFromGet = isset($_GET['id_session']) ? (int) $_GET['id_session'] : 0;
+$sessionIdFromGet = isset($_GET['id_session']) ? (int) $_GET['id_session'] : false;
 // if a session id has been given in url, we store the session if course was set:
 $sessionIdFromSession = api_get_session_id();
 $checkFromDatabase = false;
 // User change from session id
-if ((!empty($sessionIdFromGet) && $sessionIdFromGet != $sessionIdFromSession) || $cidReset) {
+if (($sessionIdFromGet !== false && $sessionIdFromGet !== $sessionIdFromSession) || $cidReset) {
     $cidReset = true;
     $checkFromDatabase = true;
     Session::erase('session_name');