tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 12:05:37 +00:00
Code Issues Projects Releases Wiki Activity

FIX Only check the remember token if a user exists

Browse Source
This commit is contained in:
Simon Welsh 2013-01-30 09:17:47 +13:00
parent c048a019f6
commit c9f728fefb
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
security/Member.php
View File

@ -384,9 +384,11 @@ class Member extends DataObject implements TemplateGlobalProvider {
$member = DataObject::get_one("Member", "\"Member\".\"ID\" = '$SQL_uid'"); $member = DataObject::get_one("Member", "\"Member\".\"ID\" = '$SQL_uid'");
// check if autologin token matches // check if autologin token matches
$hash = $member->encryptWithUserSettings($token); if($member) {
if($member && (!$member->RememberLoginToken || $member->RememberLoginToken != $hash)) { $hash = $member->encryptWithUserSettings($token);
$member = null; if(!$member->RememberLoginToken || $member->RememberLoginToken !== $hash) {
$member = null;
}
} }
if($member) { if($member) {