http auth do not use sessions.
authorAlan Knowles <alan@roojs.com>
Tue, 3 Nov 2020 06:38:35 +0000 (14:38 +0800)
committerAlan Knowles <alan@roojs.com>
Tue, 3 Nov 2020 06:38:35 +0000 (14:38 +0800)
DataObjects/Core_person.php

index 5160b4e..0c17a7d 100644 (file)
@@ -251,7 +251,10 @@ class Pman_Core_DataObjects_Core_person extends DB_DataObject
     //   ---------------- authentication / passwords and keys stuff  ----------------
     function isAuth()
     {
-        @session_start();
+        // do not start a session if we are using http auth...
+        if (empty($_SERVER['PHP_AUTH_USER'])) {
+            @session_start();
+        }
        
         $ff= HTML_FlexyFramework::get();