From: Vincent Zanotti Date: Sat, 16 May 2009 21:30:17 +0000 (+0200) Subject: Fixes the SUID session start for disabled users. X-Git-Tag: xorg/0.10.1~49^2~4 X-Git-Url: http://git.polytechnique.org/?a=commitdiff_plain;h=fee8bd2060b02c440c3e02af54f34f4e65bc2d28;p=platal.git Fixes the SUID session start for disabled users. Signed-off-by: Vincent Zanotti --- diff --git a/classes/xorgsession.php b/classes/xorgsession.php index c9ac0b7..cf2413f 100644 --- a/classes/xorgsession.php +++ b/classes/xorgsession.php @@ -214,6 +214,10 @@ class XorgSession extends PlSession LEFT JOIN logger.last_sessions AS ls ON (ls.uid = u.user_id) LEFT JOIN logger.sessions AS s ON(s.id = ls.id) WHERE u.user_id = {?} AND u.perms IN('admin', 'user')", $uid); + if ($res->numRows() != 1) { + return false; + } + $sess = $res->fetchOneAssoc(); $perms = $sess['perms']; unset($sess['perms']);