From e5c80e46b09b90ec2f5e181032c66480af598e51 Mon Sep 17 00:00:00 2001 From: mrgoldy Date: Tue, 10 Mar 2020 01:49:57 +0100 Subject: [PATCH] [ticket/16397] Expose user identifier PHPBB3-16397 --- phpBB/phpbb/session.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/phpBB/phpbb/session.php b/phpBB/phpbb/session.php index 6851bc8188..58d56ff3f3 100644 --- a/phpBB/phpbb/session.php +++ b/phpBB/phpbb/session.php @@ -25,6 +25,7 @@ class session var $forwarded_for = ''; var $host = ''; var $session_id = ''; + public $id = ANONYMOUS; var $ip = ''; var $load = 0; var $time_now = 0; @@ -362,6 +363,8 @@ class session // Did the session exist in the DB? if (isset($this->data['user_id'])) { + $this->id = (int) $this->data['user_id']; + // Validate IP length according to admin ... enforces an IP // check on bots if admin requires this // $quadcheck = ($config['ip_check_bot'] && $this->data['user_type'] & USER_BOT) ? 4 : $config['ip_check']; @@ -647,7 +650,7 @@ class session } // Force user id to be integer... - $this->data['user_id'] = (int) $this->data['user_id']; + $this->id = $this->data['user_id'] = (int) $this->data['user_id']; // At this stage we should have a filled data array, defined cookie u and k data. // data array should contain recent session info if we're a real user and a recent