Chris/webperl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Clearing session ID on failed login.

Browse Source
This commit is contained in:
Chris 2011-10-05 14:22:09 +01:00
parent 217b024d79
commit eae1f3fffe
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
SessionHandler.pm
View File

@ -228,6 +228,7 @@ sub create_session {
} elsif($user) {
$self -> {"autokey"} = '';
$self -> {"sessuser"} = $user;
$self -> {"sessid"} = undef;
$userdata = $self -> {"auth"} -> get_user_byid($user, 1);
}
@ -236,6 +237,7 @@ sub create_session {
# the user doesn't exist, is inactive, or is a bot. Just get the anonymous user
if(!$userdata) {
$self -> {"autokey"} = '';
$self -> {"sessid"} = undef;
$self -> {"sessuser"} = $self -> {"auth"} -> {"ANONYMOUS"};
$userdata = $self -> {"auth"} -> get_user_byid($self -> {"sessuser"});