[TikiWiki-commits] [Git][tikiwiki/tiki][29.x] [BP][FIX] Prevent logout loop - session invalidation logic

Olivier Kango pushed to branch 29.x at Tiki Wiki CMS Groupware / Tiki


Commits:
e73cb156 by Yves Ngalamulume at 2026-03-04T22:41:20+02:00
[BP][FIX] Prevent logout loop - session invalidation logic
---
* [FIX] Prevent logout loop - session invalidation logic
---
* [FIX] Prevent logout loop - session invalidation logic

See merge request tikiwiki/tiki!9608

(cherry picked from commit c2076702ab022831b313daf87cb4fef7c7cd4c88)

See merge request tikiwiki/tiki!9688

- - - - -


1 changed file:

- tiki-setup.php


Changes:

=====================================
tiki-setup.php
=====================================
@@ -71,7 +71,7 @@ require_once('tiki-setup_base.php'); //Starting here composer autoloading is ava
 if (! empty($user) && isset($_SESSION['login_time'])) {
     $userInfo = $userlib->get_user_info($user);
 
-    if (! empty($userInfo['lastLogin']) && $_SESSION['login_time'] < $userInfo['lastLogin']) {
+    if (! empty($userInfo['pass_confirm']) && $_SESSION['login_time'] < $userInfo['pass_confirm']) {
         TikiLib::lib('login')->logout();
         if (! defined('TIKI_CONSOLE') && PHP_SAPI !== 'cli') {
             header('Location:tiki-login_scr.php');



View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/e73cb156ada4f472998f0bb9f678a52823d88da6

-- 
View it on GitLab: https://gitlab.com/tikiwiki/tiki/-/commit/e73cb156ada4f472998f0bb9f678a52823d88da6
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help

_______________________________________________
TikiWiki-cvs mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tikiwiki-cvs