Mercurial > hg > fapweb
diff admajax.php @ 687:a38eab6f2bd2
Improve session expiration handling.
author | Matti Hamalainen <ccr@tnsp.org> |
---|---|
date | Sun, 09 Nov 2014 20:36:37 +0200 |
parents | 8730bffcffd4 |
children | a934b2de8ef1 |
line wrap: on
line diff
--- a/admajax.php Sun Nov 09 20:36:01 2014 +0200 +++ b/admajax.php Sun Nov 09 20:36:37 2014 +0200 @@ -536,7 +536,7 @@ // // Check if we are allowed to execute // -if (!stCheckHTTPS() || !stAdmSessionAuth() || !stCSRFCheck()) +if (!stCheckHTTPS() || !stAdmSessionAuth(TRUE) || !stCSRFCheck()) { stSetStatus(903, "Session expired."); stSetupCacheControl(); @@ -564,6 +564,7 @@ stReloadSettings(); stReloadDisplayVars(); +stSessionExpire(SESS_ADMIN, FALSE); $voteKeyMode = stGetSetting("voteKeyMode");