Issue 1505 Change a key for checking login session.

git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@10179 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
ngleader 2012-02-23 00:26:36 +00:00
parent b035fe00e7
commit ccaef66214

View file

@ -1450,7 +1450,7 @@
$do_auto_login = false;
// Compare key values based on the information
$key = md5($user_id.$password.$_SERVER['REMOTE_ADDR']);
$key = md5($user_id . $password . $_SERVER['HTTP_USER_AGENT']);
if($key == $args->autologin_key) {
@ -1530,7 +1530,7 @@
// When user checked to use auto-login
if($keep_signed) {
// Key generate for auto login
$autologin_args->autologin_key = md5(strtolower($user_id).$this->memberInfo->password.$_SERVER['REMOTE_ADDR']);
$autologin_args->autologin_key = md5(strtolower($user_id).$this->memberInfo->password.$_SERVER['HTTP_USER_AGENT']);
$autologin_args->member_srl = $this->memberInfo->member_srl;
executeQuery('member.deleteAutologin', $autologin_args);
$autologin_output = executeQuery('member.insertAutologin', $autologin_args);