Andrey Grinenko 8f1cca087b session fixation fix - previous version did not let me in, because it regenerated session before even trying to start old one and check whether it is valid or not. ...

I've also added session regeneration on login, which is good practice to prevent session fixation.

2015-02-21 02:58:44 +03:00

6.2 KiB

Raw Blame History

View Raw