fec41e7539
There were code paths that nowadays call ISession::login directly thus bypassing the desired regeneration of the session ID. This moves the session regeneration deeper into the session handling and thus ensures that it is always called. Furthermore, I also added the session regeneration to the remember me cookie plus added some test case expectations for this. |
||
---|---|---|
.. | ||
backend.php | ||
database.php | ||
interface.php | ||
loginexception.php | ||
manager.php | ||
nouserexception.php | ||
session.php | ||
user.php |