bug #1763343 [session] Behavior with session.auto_start enabled

This commit is contained in:
Marc Delisle
2007-11-25 13:33:54 +00:00
parent 25e67b1935
commit 00374abf2a
2 changed files with 4 additions and 6 deletions

View File

@@ -28,6 +28,7 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
- bug #1759194 [import] open_basedir warning - bug #1759194 [import] open_basedir warning
- bug #1793948 [parser] ROW_FORMAT incorrectly parsed - bug #1793948 [parser] ROW_FORMAT incorrectly parsed
- undefined PMA_MYSQL_INT_VERSION when no default server is set - undefined PMA_MYSQL_INT_VERSION when no default server is set
- bug #1763343 [session] Behavior with session.auto_start enabled
2.11.2.2 (2007-11-20) 2.11.2.2 (2007-11-20)
- bug #1835123 [security] fixed XSS vulnerability on login page, - bug #1835123 [security] fixed XSS vulnerability on login page,

View File

@@ -19,12 +19,9 @@
if (!@function_exists('session_name')) { if (!@function_exists('session_name')) {
PMA_fatalError('strCantLoad', 'session'); PMA_fatalError('strCantLoad', 'session');
} elseif (ini_get('session.auto_start') == true && session_name() != 'phpMyAdmin') { } elseif (ini_get('session.auto_start') == true && session_name() != 'phpMyAdmin') {
$_SESSION = array(); // Do not delete the existing session, it might be used by other
if (isset($_COOKIE[session_name()])) { // applications; instead just close it.
PMA_removeCookie(session_name()); session_write_close();
}
session_unset();
@session_destroy();
} }
// disable starting of sessions before all settings are done // disable starting of sessions before all settings are done