Session fix when form + HTTP auth are used (#2286)

bf51c82d55 https://github.com/FreshRSS/FreshRSS/issues/2125#issuecomment-473873922
6 years ago · e84a90943a
parent 707388c093
commit e84a90943a
1 changed files with 1 additions and 1 deletions
--- a/app/Models/Auth.php
+++ b/app/Models/Auth.php
@ -13,7 +13,7 @@ class FreshRSS_Auth {
 	 * This method initializes authentication system.
 	 */
 	public static function init() {
-		if (Minz_Session::param('REMOTE_USER', '') !== httpAuthUser()) {
+		if (isset($_SESSION['REMOTE_USER']) && $_SESSION['REMOTE_USER'] !== httpAuthUser()) {
 			//HTTP REMOTE_USER has changed
 			self::removeAccess();
 		}