Prevent management panel reauthentication in a single request

Resolves #208.
This commit is contained in:
Trevor Slocum 2021-04-28 19:31:56 -07:00
parent f3b892c960
commit 1a898e353c
1 changed files with 4 additions and 0 deletions

View File

@ -366,6 +366,10 @@ function manageCheckLogIn($requireKey) {
$_SESSION['tinyib_key'] = hashData(TINYIB_MANAGEKEY);
$_SESSION['tinyib_username'] = $a['username'];
$_SESSION['tinyib_password'] = $a['password'];
// Prevent reauthentication
$_POST['username'] = '';
$_POST['managepassword'] = '';
}
if (isset($_SESSION['tinyib_username']) && isset($_SESSION['tinyib_password'])) {