aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPaul S. Owen <psotfx@users.sourceforge.net>2002-02-11 12:42:23 +0000
committerPaul S. Owen <psotfx@users.sourceforge.net>2002-02-11 12:42:23 +0000
commitd9616cbe16c48f3350e98c74b3a3a4dfd9c24864 (patch)
tree0c5095fa04aa77ca2448c9064b57f6e717ee81b1
parentad583883023f376abd907b12735e9415abfd5466 (diff)
downloadforums-d9616cbe16c48f3350e98c74b3a3a4dfd9c24864.tar
forums-d9616cbe16c48f3350e98c74b3a3a4dfd9c24864.tar.gz
forums-d9616cbe16c48f3350e98c74b3a3a4dfd9c24864.tar.bz2
forums-d9616cbe16c48f3350e98c74b3a3a4dfd9c24864.tar.xz
forums-d9616cbe16c48f3350e98c74b3a3a4dfd9c24864.zip
Fix bug #515510 prevent autologin of inactive users
git-svn-id: file:///svn/phpbb/trunk@2083 89ea8834-ac86-4346-8a33-228a782c2dd0
-rw-r--r--phpBB/includes/sessions.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/phpBB/includes/sessions.php b/phpBB/includes/sessions.php
index a8a36f1dc7..2c19730700 100644
--- a/phpBB/includes/sessions.php
+++ b/phpBB/includes/sessions.php
@@ -66,7 +66,7 @@ function session_begin($user_id, $user_ip, $page_id, $auto_create = 0, $enable_a
// what's needed is a session timer in the user table
// + the user_lastvisit ... damn damn damn damn and blast
//
- $sql = "SELECT user_password, user_session_time, user_email
+ $sql = "SELECT user_password, user_session_time, user_email, user_active
FROM " . USERS_TABLE . "
WHERE user_id = $user_id";
$result = $db->sql_query($sql);
@@ -81,7 +81,7 @@ function session_begin($user_id, $user_ip, $page_id, $auto_create = 0, $enable_a
if( $auto_create )
{
- if( isset($sessiondata['autologinid']) )
+ if( isset($sessiondata['autologinid']) && $row['user_active'] )
{
// We have to login automagically
if( $sessiondata['autologinid'] == $auto_login_key )