From 10962c9208b9d54925d971b432648ceaaaf5c165 Mon Sep 17 00:00:00 2001 From: Sam <1631095+takuy@users.noreply.github.com> Date: Thu, 23 Apr 2020 06:51:35 -0400 Subject: [PATCH] Fix version comparison for session ID regen (#1178) session_regenerate_id : as planned back in 2016, remove PHP version check entirely. ... and let's see if it still is a problem on recent PHP versions. --- include/functions_user.inc.php | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/include/functions_user.inc.php b/include/functions_user.inc.php index 932b5d362..812b6a9af 100644 --- a/include/functions_user.inc.php +++ b/include/functions_user.inc.php @@ -936,10 +936,7 @@ function log_user($user_id, $remember_me) if ( session_id()!="" ) { // we regenerate the session for security reasons // see http://www.acros.si/papers/session_fixation.pdf - if (version_compare(PHP_VERSION, '7') <= 0) - { - session_regenerate_id(true); - } + session_regenerate_id(true); } else {