openrat-cms

commit 27800e1b1643aa2d95b1c954396fc75e140255fb
parent e0b431484d6b4a6c93edf4e06c6e93f2ee592304
Author: Jan Dankert <devnull@localhost>
Date:   Fri,  1 Mar 2013 22:54:09 +0100

Fix: Abfragen, ob Cookies existieren.

Diffstat:
auth/RememberAuth.class.php
 | 
10
++++++++--

1 file changed, 8 insertions(+), 2 deletions(-)
diff --git a/auth/RememberAuth.class.php b/auth/RememberAuth.class.php
@@ -9,17 +9,23 @@ class RememberAuth implements Auth
 {
 	public function username()
 	{
-		if	( isset($_COOKIE['or_username']) )
+		// Ermittelt den Benutzernamen aus den Login-Cookies.
+		if	( isset($_COOKIE['or_username']) &&
+			  isset($_COOKIE['or_token'   ]) &&
+			  isset($_COOKIE['or_dbid'    ])    )
 		{
 			$name = $_COOKIE['or_username'];
 			try
 			{
+				$dbid = $_COOKIE['or_dbid'];
+				
 				global $conf;
-				$db = new DB( $conf['database'][$_COOKIE['or_dbid']] );
+				$db = new DB( $conf['database'][$dbid] );
 				$db->id = $dbid;
 				$db->start();
 				Session::setDatabase($db);
 				
+				// Jetzt den Benutzer laden und nachschauen, ob der Token stimmt.
 				$user = User::loadWithName($name);
 				$token = $user->loginToken();