uid-salt

郭成尧
Commit d4c3f6825848051b69c469569af59d31960a0ea2 1 parent 59b9f3ac
Showing 1 changed file with 4 additions and 5 deletions
library/Action/AbstractAction.php
--- a/library/Action/AbstractAction.php
View file @d4c3f68
+++ b/library/Action/AbstractAction.php
View file @d4c3f68
@@ -363,11 +363,10 @@ class AbstractAction extends Controller_Abstract
                 $cookieList[1] = intval(Encryption::decrypt($cookieList[1]));
                 if (isset($cookieList[1]) && $cookieList[1]) {
                     if ($useSession) {
-                        $token = $this->getSession('_TOKEN');
-                        if (empty($token)) {
-                            $token = $this->getCookie('_TOKEN');
-                        }
-                        if ($token === Helpers::makeToken($cookieList[1])) {
+                        $token = $cookieList[3];
+                        $salt = substr($token, -8);
+
+                        if ($token === Helpers::makeToken($cookieList[1] . $salt)) {
                             $this->_uid = $cookieList[1];
                         }
                     } else {