jake/spoons
1
Fork 0
mirror of https://github.com/jakejarvis/spoons.git synced 2026-07-29 05:55:20 -04:00
Code Releases Activity

fix security flaw -- still prints list after redirect to login page

Browse Source
This commit is contained in:
jake
2013-05-19 16:23:56 -04:00
parent 1855f77493
commit 0f3d8f7b4c
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
header.php
+1
View File
@@ -4,6 +4,7 @@ include_once('config.php');
session_start();
if(!isset($_SESSION['logged_in']) || $_SESSION['logged_in'] == FALSE) {
header("Location:" . $site_url . "/login");
die();
}
include_once('functions.php');
login.php
+3
View File
@@ -5,9 +5,11 @@ session_start();
if($_SESSION['logged_in']) {
header("Location:" . $site_url . "/");
die();
} else if($_COOKIE['remembered'] == 'TRUE') {
$_SESSION['logged_in'] = TRUE;
header("Location:" . $site_url . "/");
die();
}
if(isset($_POST['password'])) {
@@ -18,6 +20,7 @@ if(isset($_POST['password'])) {
setcookie('remembered', 'TRUE', $threeMonths);
}
header("Location:" . $site_url . "/");
die();
} else {
$failure = TRUE;
}