[svn r11508] bug 1273 : clean the admin login info when changing the user before changing session vars.

skala
Guillaume Lederer 19 years ago
parent 77a751b7fa
commit efef8bf448
  1. 8
      main/admin/user_list.php

@ -1,6 +1,6 @@
<?php <?php
// $Id: user_list.php 11301 2007-03-01 13:57:15Z elixir_julian $ // $Id: user_list.php 11508 2007-03-09 13:40:24Z guim_led $
/* /*
============================================================================== ==============================================================================
Dokeos - elearning and course management software Dokeos - elearning and course management software
@ -107,6 +107,10 @@ function login_user($user_id)
$user_data = mysql_fetch_array($sql_result); $user_data = mysql_fetch_array($sql_result);
//Delog the current user
LoginDelete($_SESSION["_user"]["user_id"], $_configuration['statistics_database']);
// Cleaning session variables // Cleaning session variables
unset($_SESSION['_user']); unset($_SESSION['_user']);
unset($_SESSION['is_platformAdmin']); unset($_SESSION['is_platformAdmin']);
@ -125,8 +129,6 @@ function login_user($user_id)
$is_platformAdmin = (bool) (!is_null($user_data['is_admin'])); $is_platformAdmin = (bool) (!is_null($user_data['is_admin']));
$is_allowedCreateCourse = (bool) ($user_data['status'] == 1); $is_allowedCreateCourse = (bool) ($user_data['status'] == 1);
LoginDelete($_SESSION["_user"]["user_id"], $_configuration['statistics_database']);
// Filling session variables with new data // Filling session variables with new data
$_SESSION['_uid'] = $user_id; $_SESSION['_uid'] = $user_id;
$_SESSION['_user'] = $_user; $_SESSION['_user'] = $_user;

Loading…
Cancel
Save