add hidden _SKIP_SESSION_UA_CHECKS tunable

master
Andrew Dolgov 6 years ago
parent c7ad4ad2d4
commit 6fbf349155

@ -49,7 +49,7 @@
if ($_SESSION["uid"]) {
if ($_SESSION["user_agent"] != sha1($_SERVER['HTTP_USER_AGENT'])) {
if (!defined('_SESSION_SKIP_UA_CHECKS') && $_SESSION["user_agent"] != sha1($_SERVER['HTTP_USER_AGENT'])) {
$_SESSION["login_error_msg"] = __("Session failed to validate (UA changed).");
return false;
}

Loading…
Cancel
Save