X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fsession.php;h=af8eb7c050f9aaec5fe282c789c8fdcf6c0cd142;hb=672960ce174197d184887e6bd280f9174cf76050;hp=306fd1cbf75cde5b984701552861d04977fd9885;hpb=0e899620c7a065952d6787c236fb2b33ae337d6a;p=mailer.git diff --git a/inc/session.php b/inc/session.php index 306fd1cbf7..af8eb7c050 100644 --- a/inc/session.php +++ b/inc/session.php @@ -52,13 +52,14 @@ $PHPSESSID = @session_id(); // Store language code in cookie set_session("mx_lang", $mx_lang); +// Load extensions here +require_once(PATH."inc/load_extensions.php"); + // Check if refid is set if ((!empty($_GET['user'])) && ($CLICK == 1) && ($_SERVER['PHP_SELF'] == "click.php")) { // The variable user comes from the click-counter script click.php and we only accept this here $GLOBALS['refid'] = bigintval($_GET['user']); -} - -if (!empty($_POST['refid'])) { +} elseif (!empty($_POST['refid'])) { // Get referral id from variable refid (so I hope this makes my script more compatible to other scripts) $GLOBALS['refid'] = SQL_ESCAPE(strip_tags($_POST['refid'])); } elseif (!empty($_GET['refid'])) { @@ -84,6 +85,18 @@ if (!isSessionVariableSet('refid') || (!empty($GLOBALS['refid'])) || ((get_sessi set_session("refid", $GLOBALS['refid']); } +// Transfer userid from session and validate it +if (isset($_SESSION['userid'])) { + // Get it secured from session + $GLOBALS['userid'] = bigintval($_SESSION['userid']); + + // Is it valid? + if (!IS_LOGGED_IN()) { + // Then destroy the user id + destroy_user_session(); + } // END - if +} + // Test session if index.php or modules.php is loaded if ((basename($_SERVER['PHP_SELF']) == "index.php") || (basename($_SERVER['PHP_SELF']) == "modules.php") || (isBooleanConstantAndTrue('mxchange_installing'))) { if (count($_SESSION) > 0) {