diff --git a/t3lib/class.t3lib_userauth.php b/t3lib/class.t3lib_userauth.php index 81eb2d2..15a9e37 100644 --- a/t3lib/class.t3lib_userauth.php +++ b/t3lib/class.t3lib_userauth.php @@ -199,6 +199,9 @@ abstract class t3lib_userAuth { // Make certain that NO user is set initially $this->user = ''; + // We need a PHP session session for most login levels + session_start(); + // Check to see if anyone has submitted login-information and if so register the user with the session. $this->user[uid] may be used to write log... $this->checkAuthentication(); @@ -1240,7 +1243,6 @@ abstract class t3lib_userAuth { // Check challenge stored in cookie: if ($this->challengeStoredInCookie) { - session_start(); if ($_SESSION['login_challenge'] !== $loginData['chalvalue']) { if ($this->writeDevLog) { t3lib_div::devLog('PHP Session stored challenge "' . $_SESSION['login_challenge'] . '" and submitted challenge "' . $loginData['chalvalue'] . '" did not match, so authentication failed!', 't3lib_userAuth', 2);