check session path

walkor · Sep 13, 2023 · 77cde40 · 77cde40
1 parent fe4fc5e
commit 77cde40
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/Protocols/Http.php b/Protocols/Http.php
@@ -459,6 +459,9 @@ public static function sessionStart()
             return true;
         }
         HttpCache::$instance->sessionStarted = true;
+        if (isset($_COOKIE[HttpCache::$sessionName]) && !\preg_match('/^[a-zA-Z0-9]+$/', $_COOKIE[HttpCache::$sessionName])) {
+            unset($_COOKIE[HttpCache::$sessionName]);
+        }
         // Generate a SID.
         if (!isset($_COOKIE[HttpCache::$sessionName]) || !\is_file(HttpCache::$sessionPath . '/ses_' . $_COOKIE[HttpCache::$sessionName])) {
             // Create a unique session_id and the associated file name.