more disabling of session with http auth
authorAlan Knowles <alan@roojs.com>
Tue, 3 Nov 2020 06:49:58 +0000 (14:49 +0800)
committerAlan Knowles <alan@roojs.com>
Tue, 3 Nov 2020 06:49:58 +0000 (14:49 +0800)
DataObjects/Core_company.php

index aca5be8..ac63449 100644 (file)
@@ -134,7 +134,9 @@ class Pman_Core_DataObjects_Core_Company extends DB_DataObject
     {
         $db = $this->getDatabaseConnection();
         $sesPrefix = $db->dsn['database'];
-        @session_start();
+        if  (empty($_SERVER['PHP_AUTH_USER'])) {
+            @session_start();
+        }
         if (!empty($_SESSION[__CLASS__][$sesPrefix .'-auth'])) {
             // in session...
             $a = unserialize($_SESSION[__CLASS__][$sesPrefix .'-auth']);