ispman/ispman-web/htdocs/admin index.cgi,1.19,1.19.2.1

Update of /cvsroot/ispman/ispman/ispman-web/htdocs/admin
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv1278

Modified Files:
      Tag: rel_1_2-bugfixes
	index.cgi 
Log Message:
fixed bug [ 986136 ] reseller/client login does not work
(thanks to Michael Bunk)


Index: index.cgi
===================================================================
RCS file: /cvsroot/ispman/ispman/ispman-web/htdocs/admin/index.cgi,v
retrieving revision 1.19
retrieving revision 1.19.2.1
diff -u -d -r1.19 -r1.19.2.1
--- index.cgi	8 Jun 2004 19:22:53 -0000	1.19
+++ index.cgi	7 Jul 2004 18:50:54 -0000	1.19.2.1
@@ -115,13 +115,14 @@
 
             # set the cookie and the session
             $session->param( "dn", $dn );
+            $session->param("uid", $uid);
+            $session->param("logintype", $r->param("logintype"));
             my @attr = split( /\s*,\s*/, CGI::unescape($dn) );
             for (@attr) {
                 my ( $var, $val ) = split( /\s*=\s*/, $_ );
                 $session->param( $var, $val );
             }
-            # disabled due to bug [940878]
-            #$session->save_param($r);
+
             print $r->redirect(
                 -url    => $ENV{'SCRIPT_NAME'},
                 -cookie => $cookie
@@ -158,18 +159,10 @@
     $session->param( "sessID",    time );
     $session->param( "logintype", $r->param("logintype") );
     $session->param( "language",  $r->param("language") );
-
-    # disabled session save because
-    # a) cookie expires at session end, so no need for saving the session
-    # b) security breach! password is saved in clear
-    #   $session->save_param($r);
 }
 
 if ( $r->param("language") ) {
     $session->param( "language", $r->param("language") );
-
-    # disabled due to bug [940878]
-    #$session->save_param($r);
 }
 
 print $r->header( -charset => "UTF-8" );



-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com