mirror/FreshRSS
0
0
Fork 0
mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-05-18 13:24:37 -04:00
Code Issues Packages Projects Releases Wiki Activity

Regenerate session ID on login (#7829)

Browse Source 
Follow-up to #7762

* Regenerate session ID on login
* Send only one cookie
* Improvements
* Delete old session file
* Simplify
* Make function consistent with others
This commit is contained in:
Inverle
2025-08-30 21:40:00 +02:00
committed by GitHub
parent 585875cda7
commit 200eafb352
3 changed files with 21 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/Controllers/userController.php
View File

@@ -149,10 +149,7 @@ class FreshRSS_user_Controller extends FreshRSS_ActionController {
return;
}
ini_set('session.use_cookies', '1');
Minz_Session::lock();
Minz_Session::regenerateID();
Minz_Session::unlock();
Minz_Session::regenerateID('FreshRSS');
}
if (FreshRSS_Context::systemConf()->force_email_validation && empty($email)) {