Gnous/mailcow
2
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

Destroy session when it becomes invalid

Browse Source
This commit is contained in:
andryyy 2017-05-14 21:53:08 +02:00
parent 3ab77b1303
commit 49f28ecaf8
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
data/web/inc/sessions.inc.php
View File

@ -54,5 +54,9 @@ function session_check() {
return true;
}
if (isset($_SESSION['mailcow_cc_role']) && session_check() === false) {
exit("Invalid session");
session_regenerate_id(true);
session_unset();
session_destroy();
session_write_close();
header("Location: /");
}