tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity

Merge pull request #5566 from stevie-mayhew/bugfix/uid

Browse Source 
BUGFIX: check token and UID before member autologin
This commit is contained in:
Daniel Hensby 2016-05-19 23:46:09 +01:00
commit 3a9bb642d2
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
security/Member.php
View File

@ -582,6 +582,10 @@ class Member extends DataObject implements TemplateGlobalProvider {
list($uid, $token) = explode(':', Cookie::get('alc_enc'), 2);
if (!$uid || !$token) {
return;
}
$member = DataObject::get_by_id("Member", $uid);
// check if autologin token matches