Give editors a new session id when they log in.

2026-09-25 21:39:06 +02:00
parent 41c46a43c6
commit 36c7fe97c5
2 changed files with 12 additions and 2 deletions
@@ -32,7 +32,7 @@ if (isset($_SESSION['editor'])) {
  if (!password_verify($compare_password, $stored_password)) {
    $denied = TRUE;
  } else {
-    $_SESSION['editor'] = $username; 
+    login_editor($username);
    // Keep user logged in with cookie, if they request it
    if (isset($_POST['remember'])) {
      create_persistent_login($username);