Project

General

Profile

Bug #17793 ยป typo3.patch

Administrator Admin, 2010-07-28 17:45

View differences:

typo3_src-4.1/typo3/sysext/cms/tslib/class.tslib_feuserauth.php 2009-10-22 18:09:06.593893086 +0200
// Storing value ONLY if there is a confirmed cookie set (->cookieID), otherwise a shellscript could easily be spamming the fe_sessions table with bogus content and thus b$
if (!$maxSizeOfSessionData || $this->cookieId===$this->id) {
if ($recs['clear_all']) {
$this->setKey('ses','recs','');
$this->setKey('ses','recs',array());
}
$change=0;
$recs_array=$this->getKey('ses','recs');
......
if (is_array($data)) {
reset($data);
while(list($rec_id,$value)=each($data)) {
if ($value != $recs_array[$table][$rec_id]) {
if ($value !== $recs_array[$table][$rec_id]) {
$recs_array[$table][$rec_id] = $value;
$change=1;
}
    (1-1/1)