From 8ebb64a92a6fe1aeae56b14dcea53ad5123982bf Mon Sep 17 00:00:00 2001 From: Marc Alexander Date: Mon, 16 Jan 2023 16:55:16 +0100 Subject: [PATCH] [ticket/17091] Ensure session length is int PHPBB3-17091 --- phpBB/phpbb/session.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/phpBB/phpbb/session.php b/phpBB/phpbb/session.php index 8e3815efd2..6f25d3b650 100644 --- a/phpBB/phpbb/session.php +++ b/phpBB/phpbb/session.php @@ -420,7 +420,7 @@ class session // Else check the autologin length... and also removing those having autologin enabled but no longer allowed board-wide. if (!$this->data['session_autologin']) { - if ($this->data['session_time'] < $this->time_now - ($config['session_length'] + 60)) + if ($this->data['session_time'] < $this->time_now - ((int) $config['session_length'] + 60)) { $session_expired = true; }