Thijs/wiki.techinc.nl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

SECURITY: Fix User::setToken() call on User::newSystemUser

Browse source 
This was supposed to reset the user token but did set it to '1'
because User::setToken accepts bool/string but only treats true
as bool.

Bug: T125161
Change-Id: Ia4196eba92cd4d170a3023db0f540a2972ffad4f
This commit is contained in:
Gergő Tisza 2016-01-28 17:10:00 -06:00
parent fcdd643a46
commit 13f2f09a19
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
includes/session/SessionManager.php
View file

@ -539,7 +539,7 @@ final class SessionManager implements SessionManagerInterface {
// Reset the user's token to kill existing sessions
$user = User::newFromName( $username );
if ( $user && $user->getToken( false ) ) {
$user->setToken( true );
$user->setToken();
$user->saveSettings();
}