dinislage/PrestaShop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

// clean cookie after logout

Browse Source
This commit is contained in:
Rémi Gaillard
2013-08-08 11:39:36 +02:00
parent ff69638595
commit 567321dd3d
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
classes/Employee.php
+4 -1
View File
@@ -249,7 +249,7 @@ class EmployeeCore extends ObjectModel
/* Employee is valid only if it can be load and if cookie password is the same as database one */ /* Employee is valid only if it can be load and if cookie password is the same as database one */
Cache::store('isLoggedBack'.$this->id, ( Cache::store('isLoggedBack'.$this->id, (
$this->id && Validate::isUnsignedId($this->id) && Employee::checkPassword($this->id, Context::getContext()->cookie->passwd) $this->id && Validate::isUnsignedId($this->id) && Employee::checkPassword($this->id, Context::getContext()->cookie->passwd)
&& (!isset($this->remote_addr) || $this->remote_addr == ip2long(Tools::getRemoteAddr()) || !Configuration::get('PS_COOKIE_CHECKIP')) && (!isset(Context::getContext()->cookie->remote_addr) || Context::getContext()->cookie->remote_addr == ip2long(Tools::getRemoteAddr()) || !Configuration::get('PS_COOKIE_CHECKIP'))
)); ));
} }
return Cache::retrieve('isLoggedBack'.$this->id); return Cache::retrieve('isLoggedBack'.$this->id);
@@ -261,7 +261,10 @@ class EmployeeCore extends ObjectModel
public function logout() public function logout()
{ {
if (isset(Context::getContext()->cookie)) if (isset(Context::getContext()->cookie))
{
Context::getContext()->cookie->logout(); Context::getContext()->cookie->logout();
Context::getContext()->cookie->write();
}
$this->id = null; $this->id = null;
} }
classes/controller/AdminController.php
+4
View File
@@ -1813,7 +1813,11 @@ class AdminControllerCore extends Controller
$this->context->employee->logout(); $this->context->employee->logout();
if ($this->controller_name != 'AdminLogin' && (!isset($this->context->employee) || !$this->context->employee->isLoggedBack())) if ($this->controller_name != 'AdminLogin' && (!isset($this->context->employee) || !$this->context->employee->isLoggedBack()))
{
if (isset($this->context->employee))
$this->context->employee->logout();
Tools::redirectAdmin($this->context->link->getAdminLink('AdminLogin').((!isset($_GET['logout']) && $this->controller_name != 'AdminNotFound') ? '&redirect='.$this->controller_name : '')); Tools::redirectAdmin($this->context->link->getAdminLink('AdminLogin').((!isset($_GET['logout']) && $this->controller_name != 'AdminNotFound') ? '&redirect='.$this->controller_name : ''));
}
// Set current index // Set current index
$current_index = 'index.php'.(($controller = Tools::getValue('controller')) ? '?controller='.$controller : ''); $current_index = 'index.php'.(($controller = Tools::getValue('controller')) ? '?controller='.$controller : '');