From fee8bd2060b02c440c3e02af54f34f4e65bc2d28 Mon Sep 17 00:00:00 2001 From: Vincent Zanotti Date: Sat, 16 May 2009 23:30:17 +0200 Subject: [PATCH] Fixes the SUID session start for disabled users. Signed-off-by: Vincent Zanotti --- classes/xorgsession.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/classes/xorgsession.php b/classes/xorgsession.php index c9ac0b7..cf2413f 100644 --- a/classes/xorgsession.php +++ b/classes/xorgsession.php @@ -214,6 +214,10 @@ class XorgSession extends PlSession LEFT JOIN logger.last_sessions AS ls ON (ls.uid = u.user_id) LEFT JOIN logger.sessions AS s ON(s.id = ls.id) WHERE u.user_id = {?} AND u.perms IN('admin', 'user')", $uid); + if ($res->numRows() != 1) { + return false; + } + $sess = $res->fetchOneAssoc(); $perms = $sess['perms']; unset($sess['perms']); -- 2.1.4