Add validation when change the url without a workspace but with a session active

2012-10-01 13:44:27 -04:00
parent 8c3a42812c
commit afcd23969e
2 changed files with 17 additions and 11 deletions
--- a/workflow/engine/methods/login/sysLogin.php
+++ b/workflow/engine/methods/login/sysLogin.php
@@ -30,6 +30,10 @@ if (isset ($_POST['form']['USER_ENV'])) {
    die ();
 }

+@session_destroy();
+session_start();
+session_regenerate_id();
+
 //Required classes for dbArray work
 require_once ("propel/Propel.php");
 require_once ("creole/Creole.php");