#637: Check if the payment message is valid before submission
[platal.git] / classes / session.php
index a06662b..c52e239 100644 (file)
@@ -26,7 +26,10 @@ class Session
         @session_start();
         if (empty($_SESSION['challenge'])) {
             $_SESSION['challenge'] = sha1(uniqid(rand(), true));
-       }
+        }
+        if (!isset($_SESSION['perms'])) {
+            $_SESSION['perms'] = new FlagSet();
+        }
     }
 
     public static function destroy()