From 33f6348d8693335f6478269e4c9dc605e1441175 Mon Sep 17 00:00:00 2001
From: Julio Cesar Laura <juliocesar@colosa.com>
Date: Tue, 29 Jan 2013 15:05:36 -0400
Subject: [PATCH] BUG 10549 Steps page. Multiple login in Steps page SOLVED

- Missing validation when session is expired
- Add validation when session is expired
---
 workflow/engine/methods/steps/steps_Ajax.php | 5 +++++
 workflow/public_html/sysGeneric.php          | 1 +
 2 files changed, 6 insertions(+)

diff --git a/workflow/engine/methods/steps/steps_Ajax.php b/workflow/engine/methods/steps/steps_Ajax.php
index 2a4c457b9..5e7ac29b9 100755
--- a/workflow/engine/methods/steps/steps_Ajax.php
+++ b/workflow/engine/methods/steps/steps_Ajax.php
@@ -21,6 +21,11 @@
  * For more information, contact Colosa Inc, 2566 Le Jeune Rd.,
  * Coral Gables, FL, 33134, USA, or email info@colosa.com.
  */
+if (!isset($_SESSION['USER_LOGGED'])) {
+    G::SendTemporalMessage('ID_LOGIN_AGAIN', 'warning', 'labels');
+    die('<script type="text/javascript">parent.location = "../login/login";</script>');
+}
+
 try {
     global $RBAC;
     switch ($RBAC->userCanAccess( 'PM_FACTORY' )) {
diff --git a/workflow/public_html/sysGeneric.php b/workflow/public_html/sysGeneric.php
index 81a4b4f11..71078dd6c 100755
--- a/workflow/public_html/sysGeneric.php
+++ b/workflow/public_html/sysGeneric.php
@@ -773,6 +773,7 @@ if (! defined( 'EXECUTE_BY_CRON' )) {
         $noLoginFiles[] = 'dynaforms_checkDependentFields';
         $noLoginFiles[] = 'fields_Ajax';
         $noLoginFiles[] = 'appFolderAjax';
+        $noLoginFiles[] = 'steps_Ajax';
 
         $noLoginFolders[] = 'services';
         $noLoginFolders[] = 'tracker';