diff options
| author | Lester Caine <lester@lsces.co.uk> | 2026-06-06 22:58:39 +0100 |
|---|---|---|
| committer | Lester Caine <lester@lsces.co.uk> | 2026-06-06 22:58:39 +0100 |
| commit | ce2c807ce05078401b3d105275d396297466e13d (patch) | |
| tree | 13ee03ccd668da1c50ed02997b0e356519ad7c98 /captcha_image.php | |
| parent | f70cb1f12cca1111866190cf3f25503147888841 (diff) | |
| download | users-ce2c807ce05078401b3d105275d396297466e13d.tar.gz users-ce2c807ce05078401b3d105275d396297466e13d.tar.bz2 users-ce2c807ce05078401b3d105275d396297466e13d.zip | |
users: fix session name split when site_title not yet in kernel_config
getSiteCookieName() fell back to 'bit-user-bitweaver' whenever kernel_config
hadn't loaded site_title (e.g. during installer/upgrade flow). This created
a second cookie alongside the real 'bit-user-<site>' cookie, causing every
cross-page redirect to land in a different session and lose loginfrom, admin
status, and installer step state.
Fix: if site_title is empty, reuse any existing bit-user-* cookie already
present in the request rather than generating a new 'bitweaver' name.
Also: after successful admin login, redirect to the installer directly when
a version upgrade is pending (bypasses the broken loginfrom-via-session path
for the INSTALLER_FORCE case).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'captcha_image.php')
0 files changed, 0 insertions, 0 deletions