regenerate session-id after login / su-action

Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
2023-06-11 12:05:33 +02:00
parent f9f1048477
commit 94d9c3eedf
3 changed files with 3 additions and 0 deletions
--- a/index.php
+++ b/index.php
@@ -786,6 +786,7 @@ if ($action == 'll') {
 function finishLogin($userinfo)
 {
 	if (isset($userinfo['userid']) && $userinfo['userid'] != '') {
+		session_regenerate_id();
 		CurrentUser::setData($userinfo);

 		$language = $userinfo['def_language'] ?? Settings::Get('panel.standardlanguage');