From a22433f7dd1e964eae105903783c7a3f965f75a9 Mon Sep 17 00:00:00 2001 From: flashwave Date: Fri, 28 Jul 2023 20:43:08 +0000 Subject: [PATCH] Don't update last online time and ip address when impersonating. --- public/index.php | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/public/index.php b/public/index.php index eb0c58b..7a0dc78 100644 --- a/public/index.php +++ b/public/index.php @@ -107,7 +107,7 @@ if($authToken->isValid()) { if(!$userInfo->isDeleted()) { $userInfo->setCurrent(); - + $userInfo->bumpActivity($_SERVER['REMOTE_ADDR']); $sessions->updateSession(sessionInfo: $sessionInfo, remoteAddr: $_SERVER['REMOTE_ADDR']); if($sessionInfo->shouldBumpExpires()) $authToken->applyCookie($sessionInfo->getExpiresTime()); @@ -132,9 +132,7 @@ if($authToken->isValid()) { User::unsetCurrent(); } - if(User::hasCurrent()) { - $userInfo->bumpActivity($_SERVER['REMOTE_ADDR']); - } else + if(!User::hasCurrent()) AuthToken::nukeCookie(); }