fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-09 03:32:00 +09:00
Code Issues Projects Releases Packages Wiki Activity

Resend autologin key periodically to maintain useful lifetime

Browse source
This commit is contained in:
Kijin Sung 2023-08-29 23:21:20 +09:00
parent e8ea70fdca
commit 87300c9944
2 changed files with 13 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

21
common/framework/Session.php
View file

@ -407,8 +407,8 @@ class Session
/**
* Refresh the session.
*
* This method can be used to invalidate old session cookies.
* It is called automatically when someone logs in or out.
* This helps increase the lifetime for session cookies and autologin cookies
* while the user is active on the site.
*
* @param bool $refresh_cookie
* @return bool
@ -428,23 +428,18 @@ class Session
'samesite' => $samesite,
);
// Set the domain initialization timestamp.
if (!isset($_SESSION['RHYMIX']['domains'][$alt_domain]['started']))
{
// Update the domain initialization timestamp.
$_SESSION['RHYMIX']['domains'][$alt_domain]['started'] = time();
}
// Reset the trusted information.
if (!isset($_SESSION['RHYMIX']['domains'][$alt_domain]['trusted']))
{
$_SESSION['RHYMIX']['domains'][$alt_domain]['trusted'] = 0;
}
// Refresh the main session cookie.
// Refresh the main session cookie and the autologin key.
if ($refresh_cookie)
{
self::destroyCookiesFromConflictingDomains(array(session_name()));
self::_setCookie(session_name(), session_id(), $options);
if (self::$_autologin_key = self::_getAutologinKey())
{
self::setAutologinKeys(substr(self::$_autologin_key, 0, 24), substr(self::$_autologin_key, 24, 24));
}
}
return true;

4
modules/member/member.controller.php
View file

@ -2233,6 +2233,10 @@ class MemberController extends Member
$args->autologin_key = $autologin_key;
$args->user_agent = json_encode(Rhymix\Framework\UA::getBrowserInfo());
$update_output = executeQuery('member.updateAutologin', $args);
if ($update_output->toBool())
{
Rhymix\Framework\Session::setAutologinKeys($autologin_key, $security_key);
}
}
// Update the last login time.