From 087a5363bba7228f29d6075deb2a099cf9d25630 Mon Sep 17 00:00:00 2001 From: Nils Adermann Date: Mon, 27 Oct 2014 23:56:20 -0700 Subject: [PATCH] [ticket/13234-2] Correctly verify that user_id is set in user data array PHPBB3-13234-2 --- phpBB/phpbb/session.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/phpBB/phpbb/session.php b/phpBB/phpbb/session.php index c787247b44..477e91efd6 100644 --- a/phpBB/phpbb/session.php +++ b/phpBB/phpbb/session.php @@ -605,7 +605,7 @@ class session $result = $db->sql_query($sql); $user_data = $db->sql_fetchrow($result); - if ($user_id === false || $user_id == $user_data['user_id']) + if ($user_id === false || (isset($user_data['user_id']) && $user_id == $user_data['user_id'])) { $this->data = $user_data; $bot = false; @@ -935,7 +935,7 @@ class session } // Reset the data array - $this->data = false; + $this->data = array(); $sql = 'SELECT * FROM ' . USERS_TABLE . '