diff options
| author | Dave Lawrence <dlawrence@mozilla.com> | 2013-10-17 15:57:57 +0200 |
|---|---|---|
| committer | Dave Lawrence <dlawrence@mozilla.com> | 2013-10-17 15:57:57 +0200 |
| commit | 62ae33ffa16c22e9705bd22e48fb8299225462f4 (patch) | |
| tree | 0571fb266d0b0c619d9be2a8c2272d04afcce9a1 /Bugzilla/Auth | |
| parent | 2c257b0a104c1bb3483adfb0eacb792c528010e9 (diff) | |
| parent | 7355bd53bc4b20e248550e5467142a79e9512fbc (diff) | |
| download | bugzilla-62ae33ffa16c22e9705bd22e48fb8299225462f4.tar.gz bugzilla-62ae33ffa16c22e9705bd22e48fb8299225462f4.tar.xz | |
merged with bugzilla/4.2
Diffstat (limited to 'Bugzilla/Auth')
| -rw-r--r-- | Bugzilla/Auth/Login/Cookie.pm | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/Bugzilla/Auth/Login/Cookie.pm b/Bugzilla/Auth/Login/Cookie.pm index 88c48e236..4db486a8f 100644 --- a/Bugzilla/Auth/Login/Cookie.pm +++ b/Bugzilla/Auth/Login/Cookie.pm @@ -72,8 +72,8 @@ sub get_login_info { trick_taint($login_cookie); detaint_natural($user_id); - my $is_valid = - $dbh->selectrow_array('SELECT 1 + my $db_cookie = + $dbh->selectrow_array('SELECT cookie FROM logincookies WHERE cookie = ? AND userid = ? @@ -81,7 +81,7 @@ sub get_login_info { undef, ($login_cookie, $user_id, $ip_addr)); # If the cookie is valid, return a valid username. - if ($is_valid) { + if (defined $db_cookie && $login_cookie eq $db_cookie) { # If we logged in successfully, then update the lastused # time on the login cookie $dbh->do("UPDATE logincookies SET lastused = NOW() |