aboutsummaryrefslogtreecommitdiffstats
path: root/Zotlabs
diff options
context:
space:
mode:
authorgit-marijus <mario@mariovavti.com>2017-09-28 11:01:01 +0200
committerGitHub <noreply@github.com>2017-09-28 11:01:01 +0200
commit98e05349848956659f081975bd704f368fd2372c (patch)
tree6546c62504a02db39b34b80913c654e5fb8bf31c /Zotlabs
parent617f2863c47ba306e8d866ea76f7120ae4465427 (diff)
parentb3c805d7d0f62cf322de21f09ba066b418d8712d (diff)
downloadvolse-hubzilla-98e05349848956659f081975bd704f368fd2372c.tar.gz
volse-hubzilla-98e05349848956659f081975bd704f368fd2372c.tar.bz2
volse-hubzilla-98e05349848956659f081975bd704f368fd2372c.zip
Merge pull request #862 from waitman/patch-4
prevent 'my_address' being set with bogus info
Diffstat (limited to 'Zotlabs')
-rw-r--r--Zotlabs/Web/WebServer.php6
1 files changed, 5 insertions, 1 deletions
diff --git a/Zotlabs/Web/WebServer.php b/Zotlabs/Web/WebServer.php
index 65b772fee..0ee735818 100644
--- a/Zotlabs/Web/WebServer.php
+++ b/Zotlabs/Web/WebServer.php
@@ -58,7 +58,11 @@ class WebServer {
if((x($_GET,'zid')) && (! \App::$install)) {
\App::$query_string = strip_zids(\App::$query_string);
if(! local_channel()) {
- $_SESSION['my_address'] = $_GET['zid'];
+ if ($_SESSION['my_address']!=$_GET['zid'])
+ {
+ $_SESSION['my_address'] = $_GET['zid'];
+ $_SESSION['authenticated'] = 0;
+ }
zid_init();
}
}