Check editor accounts.

A new editor needs a username and a password of at least 12 characters. A persistent login needs an unexpired key and an existing account. Removing an account revokes its persistent logins, and its sessions end.
2026-09-26 15:27:51 +02:00
parent 5d657d7e45
commit 3df88e0b4c
10 changed files with 217 additions and 16 deletions
@@ -7,7 +7,7 @@ if ($queue) session_cache_limiter('nocache');
 else session_cache_limiter('none');
 session_set_cookie_params(array('lifetime' => 0, 'path' => '/', 'domain' => cookie_domain(), 'secure' => TRUE, 'httponly' => TRUE, 'samesite' => 'Lax'));
 session_start();
-if (isset($_SESSION['editor'])) {
+if (isset($_SESSION['editor']) && editor_exists($_SESSION['editor'])) {
  $is_admin = TRUE;
  $username = $_SESSION['editor'];
 } else {