jake/spoons
1
Fork 0
mirror of https://github.com/jakejarvis/spoons.git synced 2025-06-29 03:15:40 -04:00
Code Releases Activity

fix security flaw -- still prints list after redirect to login page

Browse Source
This commit is contained in:
Jake Jarvis
2013-05-19 16:23:56 -04:00
parent 1855f77493
commit 0f3d8f7b4c
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
header.php
View File

@ -4,6 +4,7 @@ include_once('config.php');
session_start();
if(!isset($_SESSION['logged_in']) || $_SESSION['logged_in'] == FALSE) {
header("Location:" . $site_url . "/login");
die();
}
include_once('functions.php');

3
login.php
View File

@ -5,9 +5,11 @@ session_start();
if($_SESSION['logged_in']) {
header("Location:" . $site_url . "/");
die();
} else if($_COOKIE['remembered'] == 'TRUE') {
$_SESSION['logged_in'] = TRUE;
header("Location:" . $site_url . "/");
die();
}
if(isset($_POST['password'])) {
@ -18,6 +20,7 @@ if(isset($_POST['password'])) {
setcookie('remembered', 'TRUE', $threeMonths);
}
header("Location:" . $site_url . "/");
die();
} else {
$failure = TRUE;
}