Verified Commit c423c93d authored by dockx thibault's avatar dockx thibault
Browse files

:ambulance: Fix(Index.php) Session ID renew after login

Fix session ID is now renewed after proper login
parent ed08e11a
No related merge requests found
Showing with 4 additions and 0 deletions
+4 -0
...@@ -408,6 +408,10 @@ class Index { ...@@ -408,6 +408,10 @@ class Index {
if ($success) { if ($success) {
/* Everything went well, redirect to main.php */ /* Everything went well, redirect to main.php */
//Regenerate after login in order to avoid session fixation issues (vuln),
session_regenerate_id();
static::redirect(); static::redirect();
} }
} }
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment