mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-07-25 17:01:43 +02:00
Code Issues Releases Wiki Activity

Issue #4657 - drop session instead of trigger login failure. (which can causing auto-bans)

Browse Source
This commit is contained in:
Cameron
2022-01-20 08:39:16 -08:00
parent 754c29d230
commit 4a0b8a7aa3
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
e107_handlers/login.php
View File

@@ -252,7 +252,13 @@ class userlogin
$user_email = $this->userData['user_email']; $user_email = $this->userData['user_email'];
/* restrict more than one person logging in using same us/pw */ /* restrict more than one person logging in using same us/pw */
if(!empty($pref['track_online']) && !empty($pref['disallowMultiLogin']) && !empty($user_id)) if(!empty($pref['session_save_method']) && ($pref['session_save_method'] === 'db') && !empty($pref['disallowMultiLogin']) && !empty($user_id))
{
// logout any existing user of this account.
$sql->delete('session', "session_user = ".$user_id);
$sql->delete('online', "online_user_id='".$user_id.".".$user_name."'");
}
elseif(!empty($pref['track_online']) && !empty($pref['disallowMultiLogin']) && !empty($user_id))
{ {
if($sql->select("online", "online_ip", "online_user_id='".$user_id.".".$user_name."'")) if($sql->select("online", "online_ip", "online_user_id='".$user_id.".".$user_name."'"))
{ {
@@ -260,10 +266,7 @@ class userlogin
} }
} }
if(!empty($pref['disallowMultiLogin']) && !empty($user_id))
{
$sql->delete('session', "session_user = ".$user_id);
}
// User login definitely accepted here // User login definitely accepted here