From b2ed873b1b9d2777b0afa36f092baa3635ff879e Mon Sep 17 00:00:00 2001 From: Pepijn Over Date: Sun, 31 Jan 2016 00:17:28 +0100 Subject: [PATCH] on login, make sure to clear existing session vars and start from fresh (moving from migrate() to invalidate()) --- src/psm/Service/User.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/psm/Service/User.php b/src/psm/Service/User.php index 5cf7d45f..55e3f074 100644 --- a/src/psm/Service/User.php +++ b/src/psm/Service/User.php @@ -248,7 +248,7 @@ class User { */ protected function setUserLoggedIn($user_id, $regenerate = false) { if($regenerate) { - $this->session->migrate(); + $this->session->invalidate(); } $this->session->set('user_id', $user_id); $this->session->set('user_logged_in', 1);