From: Alan Knowles <alan@roojs.com>
Date: Tue, 3 Nov 2020 06:38:35 +0000 (+0800)
Subject: http auth do not use sessions.
X-Git-Url: http://git.roojs.org/?p=Pman.Core;a=commitdiff_plain;h=89b7f2b7d9572a08b32450cb1604478ce066a064

http auth do not use sessions.
---

diff --git a/DataObjects/Core_person.php b/DataObjects/Core_person.php
index 5160b4e3..0c17a7de 100644
--- a/DataObjects/Core_person.php
+++ b/DataObjects/Core_person.php
@@ -251,7 +251,10 @@ class Pman_Core_DataObjects_Core_person extends DB_DataObject
     //   ---------------- authentication / passwords and keys stuff  ----------------
     function isAuth()
     {
-        @session_start();
+        // do not start a session if we are using http auth...
+        if (empty($_SERVER['PHP_AUTH_USER'])) {
+            @session_start();
+        }
        
         $ff= HTML_FlexyFramework::get();