mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-04-20 20:51:53 +02:00
Code Issues Releases Wiki Activity

Issue #4657 - drop session instead of trigger login failure. (which can causing auto-bans)

Browse Source
This commit is contained in:
Cameron 2022-01-20 08:39:16 -08:00
parent 754c29d230
commit 4a0b8a7aa3
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
e107_handlers/login.php
View File

@ -252,7 +252,13 @@ class userlogin
$user_email = $this->userData['user_email'];
/* restrict more than one person logging in using same us/pw */
if(!empty($pref['track_online']) && !empty($pref['disallowMultiLogin']) && !empty($user_id))
if(!empty($pref['session_save_method']) && ($pref['session_save_method'] === 'db') && !empty($pref['disallowMultiLogin']) && !empty($user_id))
{
// logout any existing user of this account.
$sql->delete('session', "session_user = ".$user_id);
$sql->delete('online', "online_user_id='".$user_id.".".$user_name."'");
}
elseif(!empty($pref['track_online']) && !empty($pref['disallowMultiLogin']) && !empty($user_id))
{
if($sql->select("online", "online_ip", "online_user_id='".$user_id.".".$user_name."'"))
{
@ -260,10 +266,7 @@ class userlogin
}
}
if(!empty($pref['disallowMultiLogin']) && !empty($user_id))
{
$sql->delete('session', "session_user = ".$user_id);
}
// User login definitely accepted here