Zookal / magento-mock

Transparent auto detecting of disabled core modules and providing mock objects for not breaking Magento.
46 stars 13 forks source link

Add shim to populate the visitor data if Mage_Log is disabled #16

Closed arollason closed 6 years ago

arollason commented 6 years ago

Mage_Log is responsible for populating the visitor_data array in the customer's session. This presents an issue with the SUPEE-10570 security patch which relies on the customer_id being present in the visitor_data array, which will not be present if Mage_Log is disabled.

This update ensures that the customer_id is set if the customer is logged in and the Mage_Log module is disabled, preserving the functionality introduced in SUPEE-10570 to log out all other sessions after a customer resets their password.