mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-06-02 04:15:05 +02:00
Fix version comparison for session ID regen (#1178)
session_regenerate_id : as planned back in 2016, remove PHP version check entirely. ... and let's see if it still is a problem on recent PHP versions.
This commit is contained in:
@@ -936,10 +936,7 @@ function log_user($user_id, $remember_me)
|
||||
if ( session_id()!="" )
|
||||
{ // we regenerate the session for security reasons
|
||||
// see http://www.acros.si/papers/session_fixation.pdf
|
||||
if (version_compare(PHP_VERSION, '7') <= 0)
|
||||
{
|
||||
session_regenerate_id(true);
|
||||
}
|
||||
session_regenerate_id(true);
|
||||
}
|
||||
else
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user