wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

set http 500 when session could not be started to prevent serving of empty files see #1049

Browse source
This commit is contained in:
Bernhard Posselt 2013-02-25 18:37:05 +01:00
parent 946a064fc6
commit 55c72617c6
1 changed files with 5 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
lib/base.php
View file

@ -320,8 +320,11 @@ class OC {
// set the session name to the instance id - which is unique
session_name(OC_Util::getInstanceId());
// (re)-initialize session
session_start();
// if session cant be started break with http 500 error
if (session_start() === false){
header('HTTP/1.1 500 Internal Server Error');
exit(1);
}
// regenerate session id periodically to avoid session fixation
if (!isset($_SESSION['SID_CREATED'])) {