diff options
| author | Andrew Dolgov <[email protected]> | 2013-04-04 12:55:15 +0400 |
|---|---|---|
| committer | Andrew Dolgov <[email protected]> | 2013-04-04 12:55:15 +0400 |
| commit | 810205625b8afb7e08b2829723426f021e0a5c1b (patch) | |
| tree | b627edd18e3bbab673ff72175ec7be1a79f80114 /include/sessions.php | |
| parent | 9fb91a20437c0a53a7d6aaf8b020ab051fbf9ce2 (diff) | |
session validation: check for tt-rss version
Diffstat (limited to 'include/sessions.php')
| -rw-r--r-- | include/sessions.php | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/include/sessions.php b/include/sessions.php index 15178915a..0edda4ec7 100644 --- a/include/sessions.php +++ b/include/sessions.php @@ -5,6 +5,7 @@ require_once "db.php"; require_once "lib/accept-to-gettext.php"; require_once "lib/gettext/gettext.inc"; + require_once "version.php"; $session_expire = max(SESSION_COOKIE_LIFETIME, 86400); $session_name = (!defined('TTRSS_SESSION_NAME')) ? "ttrss_sid" : TTRSS_SESSION_NAME; @@ -38,6 +39,8 @@ if (SINGLE_USER_MODE) return true; if (!$link) return false; + if (VERSION != $_SESSION["version"]) return false; + $check_ip = $_SESSION['ip_address']; switch (SESSION_CHECK_ADDRESS) { |