Changeset 23352 for branches/version-2_13-dev/data/class/pages

Timestamp:

2014/03/19 23:12:02 (10 years ago)

Author:

shutta

Message:

#2513 (Session Fixation対策)
ログイン後には、セッションIDを新しいIDに更新するよう修正。

File:

• branches/version-2_13-dev/data/class/pages/admin/LC_Page_Admin_Index.php (modified) (1 diff)

branches/version-2_13-dev/data/class/pages/admin/LC_Page_Admin_Index.php

@@ -186 +186 @@
     public function lfSetLoginSession($member_id, $login_id, $authority, $login_name, $last_login)
     {
+        // Session Fixation対策
+        SC_Session_Ex::regenerateSID();
+
         $objSess = new SC_Session_Ex();
         // 認証済みの設定