Prevent session fixation

slawkens · Nov 27, 2023 · 483155c · 483155c
1 parent 55dbade
commit 483155c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/system/login.php b/system/login.php
@@ -94,6 +94,7 @@
 				&& (!isset($t) || $t['attempts'] < 5)
 				)
 			{
+				session_regenerate_id();
 				setSession('account', $account_logged->getId());
 				setSession('password', encrypt(($config_salt_enabled ? $account_logged->getCustomField('salt') : '') . $login_password));
 				if($remember_me) {