Verified Commit c423c93d authored by dockx thibault's avatar dockx thibault
Browse files

:ambulance: Fix(Index.php) Session ID renew after login

Fix session ID is now renewed after proper login
Showing with 4 additions and 0 deletions
+4 -0
......@@ -408,6 +408,10 @@ class Index {
if ($success) {
/* Everything went well, redirect to main.php */
//Regenerate after login in order to avoid session fixation issues (vuln),
session_regenerate_id();
static::redirect();
}
}
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment