diff --git a/resources/check_auth.php b/resources/check_auth.php index 6e17ab6fe8..161e626d33 100644 --- a/resources/check_auth.php +++ b/resources/check_auth.php @@ -44,12 +44,12 @@ } //regenerate sessions to avoid session id attacks such as session fixation - if (array_key_exists('security',$_SESSION) && $_SESSION['security']['session_rotate']['boolean'] == "true") { + if (isset($_SESSION['authorized']) && $_SESSION['authorized']) { $_SESSION['session']['last_activity'] = time(); if (!isset($_SESSION['session']['created'])) { $_SESSION['session']['created'] = time(); - } else if (time() - $_SESSION['session']['created'] > 28800) { - // session started more than 8 hours ago + } elseif (time() - $_SESSION['session']['created'] > 28800) { + //session started more than 8 hours ago session_regenerate_id(true); // rotate the session id $_SESSION['session']['created'] = time(); // update creation time }