maketank/Froxlor
2
0
Fork 0
Code Pull Requests Releases Activity

correctly redirect to last-page if session is timed out and remove passing script/qrystr url parameters

Browse Source 
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
This commit is contained in:
Michael Kaufmann
2023-08-11 12:09:23 +02:00
parent 99c1182af8
commit 2d30394150
6 changed files with 25 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
admin_customers.php
View File

@@ -93,6 +93,7 @@ if (($page == 'customers' || $page == 'overview') && $userinfo['customers'] != '
$result['switched_user'] = CurrentUser::getData();
$result['adminsession'] = 0;
$result['userid'] = $result['customerid'];
session_regenerate_id(true);
CurrentUser::setData($result);
$log->logAction(FroxlorLogger::ADM_ACTION, LOG_INFO, "switched user and is now '" . $destination_user . "'");