WMDE
/
LDAPAccountManager
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fix session timeout

This commit is contained in:
Roland Gruber 2013-03-01 18:22:40 +00:00
parent 14724b889f
commit 6fc5c2ec8a
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
lam/lib/security.inc
View File

@ -135,8 +135,9 @@ function logoffAndBackToLoginPage() {
setcookie("IV", "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", 0, "/"); setcookie("IV", "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", 0, "/");
} }
// link back to login page // link back to login page
$paths = array('./', '../', '../../', '../../../'); $paths = array('./', '../', '../../', '../../../', '../../../../');
$page = 'login.php?expired=yes'; $page = 'login.php';
$pageSuffix = '?expired=yes';
if (isset($_SESSION['selfService_clientDN'])) { if (isset($_SESSION['selfService_clientDN'])) {
$scope = $_GET['scope']; $scope = $_GET['scope'];
$name = $_GET['name']; $name = $_GET['name'];
@ -144,7 +145,8 @@ function logoffAndBackToLoginPage() {
logNewMessage(LOG_ERR, 'GET parameters invalid: ' . $name . ' ' . $scope); logNewMessage(LOG_ERR, 'GET parameters invalid: ' . $name . ' ' . $scope);
die(); die();
} }
$page = 'selfServiceLogin.php?expired=yes&scope=' . $scope . '&name=' . $name; $page = 'selfServiceLogin.php';
$pageSuffix = '?expired=yes&scope=' . $scope . '&name=' . $name;
} }
for ($i = 0; $i < sizeof($paths); $i++) { for ($i = 0; $i < sizeof($paths); $i++) {
if (file_exists($paths[$i] . $page)) { if (file_exists($paths[$i] . $page)) {
@ -152,6 +154,7 @@ function logoffAndBackToLoginPage() {
break; break;
} }
} }
$page .= $pageSuffix;
echo $_SESSION['header']; echo $_SESSION['header'];
echo "<title></title>\n"; echo "<title></title>\n";
echo "</head>\n"; echo "</head>\n";