0014976: New file versions can be uploaded even if session is expired

ILIAS-eLearning · Jul 28, 2015 · a4450f2 · a4450f2
1 parent ca66021
commit a4450f2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Services/Authentication/classes/class.ilAuthBase.php b/Services/Authentication/classes/class.ilAuthBase.php
@@ -136,13 +136,15 @@ protected function loginObserver($a_username,$a_auth)
 				if(!$user->getActive())
 				{
 					$this->status = AUTH_USER_INACTIVE;
+					$a_auth->logout();
 					return;
 				}
 
 				// time limit
 				if(!$user->checkTimeLimit())
 				{
 					$this->status = AUTH_USER_TIME_LIMIT_EXCEEDED;
+					$a_auth->logout();
 					return;
 				}
 
@@ -156,6 +158,7 @@ protected function loginObserver($a_username,$a_auth)
 					if (!preg_match("/^".$clientip."$/", $_SERVER["REMOTE_ADDR"]))
 					{
 						$this->status = AUTH_USER_WRONG_IP;
+						$a_auth->logout();
 						return;
 					}
 				}				
@@ -165,6 +168,7 @@ protected function loginObserver($a_username,$a_auth)
 					ilObjUser::hasActiveSession($user_id))
 				{
 					$this->status = AUTH_USER_SIMULTANEOUS_LOGIN;
+					$a_auth->logout();
 					return;
 				}