shibboleth authentication module #4554: clear current session before login a user

13 years ago · 28962fb139
parent 842f6be404
commit 28962fb139
1 changed files with 1 additions and 0 deletions
--- a/main/auth/shibboleth/app/lib/shibboleth_session.class.php
+++ b/main/auth/shibboleth/app/lib/shibboleth_session.class.php
@ -53,6 +53,7 @@ class ShibbolethSession
            return;
        }

+        session_unset();
        api_session_register('_uid');

        global $_user;