joshtronic/pickles
1
0
Fork 0
Code Issues 8 Pull requests Projects Releases Packages Wiki Activity Actions

Disabled token logic

Browse source 
Causing a bunch of shit in scenarios where you want to unauth / reauth a user as the cookie isn't immediately available. Should resolve all of the "You are not properly authenticated" errors we see.
This commit is contained in:
Josh Sherman 2015-09-12 11:47:08 -04:00
parent 0c3b239417
commit b82b04b121
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
classes/Security.php
View file

@ -255,12 +255,14 @@ class Security
if (self::checkSession() == true && isset($_SESSION['__pickles']['security']['user_id'])) if (self::checkSession() == true && isset($_SESSION['__pickles']['security']['user_id']))
{ {
// Checks the session against the cookie // Checks the session against the cookie
/*
if (isset($_SESSION['__pickles']['security']['token'], $_COOKIE['pickles_security_token']) if (isset($_SESSION['__pickles']['security']['token'], $_COOKIE['pickles_security_token'])
&& $_SESSION['__pickles']['security']['token'] != $_COOKIE['pickles_security_token']) && $_SESSION['__pickles']['security']['token'] != $_COOKIE['pickles_security_token'])
{ {
Security::logout(); Security::logout();
} }
elseif (isset($_SESSION['__pickles']['security']['level']) && $_SESSION['__pickles']['security']['level'] != null) else*/
if (isset($_SESSION['__pickles']['security']['level']) && $_SESSION['__pickles']['security']['level'] != null)
{ {
return $_SESSION['__pickles']['security']['level']; return $_SESSION['__pickles']['security']['level'];
} }