From ee350b73525cb2a44e006289f11004c52a3f8b59 Mon Sep 17 00:00:00 2001
From: Regis Houssin <regis@dolibarr.fr>
Date: Wed, 20 May 2009 18:23:02 +0000
Subject: [PATCH] =?UTF-8?q?Fix:=20ouverture=20d'une=20session=20temporaire?=
=?UTF-8?q?=20de=20securite=20pour=20stocker=20une=20de=20cryptage=20al=E9?=
=?UTF-8?q?atoire=20pour=20=20encryption=20du=20cookie?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
---
htdocs/main.inc.php | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/htdocs/main.inc.php b/htdocs/main.inc.php
index 366ca47e0dc..d97667a9dde 100644
--- a/htdocs/main.inc.php
+++ b/htdocs/main.inc.php
@@ -127,7 +127,7 @@ if (!isset($_SESSION['cryptkey'])) $_SESSION['cryptkey'] = mt_rand();
// This include will set: $conf, $langs and $mysoc objects
require_once("master.inc.php");
-//Fermeture de la session de s�curite, ses donnees sont sauvegardees
+//Fermeture de la session de securite, ses donnees sont sauvegardees
session_write_close();
// Check if HTTPS
@@ -448,7 +448,6 @@ if (! isset($_SESSION["dol_login"]))
}
// Create entity cookie
- // TODO Remove this as it is a security hole
if ($conf->multicompany->enabled && isset($_POST["entity"]))
{
include_once(DOL_DOCUMENT_ROOT . "/core/cookie.class.php");
--
GitLab