lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: ouverture d'une session temporaire de securite pour stocker une de cryptage alatoire pour

Browse Source 
encryption du cookie
This commit is contained in:
Regis Houssin 2009-05-20 18:23:02 +00:00
parent 3786711822
commit ee350b7352
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
htdocs/main.inc.php
View File

@ -127,7 +127,7 @@ if (!isset($_SESSION['cryptkey'])) $_SESSION['cryptkey'] = mt_rand();
// This include will set: $conf, $langs and $mysoc objects // This include will set: $conf, $langs and $mysoc objects
require_once("master.inc.php"); require_once("master.inc.php");
//Fermeture de la session de sécurite, ses donnees sont sauvegardees //Fermeture de la session de securite, ses donnees sont sauvegardees
session_write_close(); session_write_close();
// Check if HTTPS // Check if HTTPS
@ -448,7 +448,6 @@ if (! isset($_SESSION["dol_login"]))
} }
// Create entity cookie // Create entity cookie
// TODO Remove this as it is a security hole
if ($conf->multicompany->enabled && isset($_POST["entity"])) if ($conf->multicompany->enabled && isset($_POST["entity"]))
{ {
include_once(DOL_DOCUMENT_ROOT . "/core/cookie.class.php"); include_once(DOL_DOCUMENT_ROOT . "/core/cookie.class.php");