diff options
| author | YoungMin Park <parkyymm@hotmail.com> | 2014-11-04 11:49:43 +0900 |
|---|---|---|
| committer | YoungMin Park <parkyymm@hotmail.com> | 2014-11-04 11:49:43 +0900 |
| commit | a5bbb2bec133bdee08b361628f32430ae3884107 (patch) | |
| tree | b203105149ec234ebe155d5718d2cbb6390b4a45 /include/sessions.php | |
| parent | 12727ad17d125eb2f3f243231ccca1cb0a5a7b4b (diff) | |
| parent | 2f43089de1ead3f164b8b31967d1abbb784319fa (diff) | |
Merge pull request #1 from gothfox/master
Update from original
Diffstat (limited to 'include/sessions.php')
| -rw-r--r-- | include/sessions.php | 18 |
1 files changed, 16 insertions, 2 deletions
diff --git a/include/sessions.php b/include/sessions.php index 423ef0eda..66214afe7 100644 --- a/include/sessions.php +++ b/include/sessions.php @@ -62,11 +62,17 @@ return false; } - if ($_SESSION["ref_schema_version"] != session_get_schema_version(true)) + if ($_SESSION["ref_schema_version"] != session_get_schema_version(true)) { + $_SESSION["login_error_msg"] = + __("Session failed to validate (schema version changed)"); return false; + } - if (sha1($_SERVER['HTTP_USER_AGENT']) != $_SESSION["user_agent"]) + if (sha1($_SERVER['HTTP_USER_AGENT']) != $_SESSION["user_agent"]) { + $_SESSION["login_error_msg"] = + __("Session failed to validate (user agent changed)"); return false; + } if ($_SESSION["uid"]) { $result = Db::get()->query( @@ -74,11 +80,19 @@ // user not found if (Db::get()->num_rows($result) == 0) { + + $_SESSION["login_error_msg"] = + __("Session failed to validate (user not found)"); + return false; } else { $pwd_hash = Db::get()->fetch_result($result, 0, "pwd_hash"); if ($pwd_hash != $_SESSION["pwd_hash"]) { + + $_SESSION["login_error_msg"] = + __("Session failed to validate (password changed)"); + return false; } } |