search

getgrav / grav-plugin-login

Grav Login Plugin
http://getgrav.org
MIT License
44 stars 54 forks source link

fix Prevent session fixation only if initialize session is enabled #296

Closed masetto closed 1 year ago

masetto commented 1 year ago

The $session->regenerateId() method must not be called if session initialization is disabled. It is up to the plugin to eventually do this.

rhukster commented 1 year ago

cheers