From 6f33cd74e44504b2543eccb2b8f21cff7e8063b3 Mon Sep 17 00:00:00 2001
From: Alan Knowles <alan@roojs.com>
Date: Tue, 3 Nov 2020 14:49:58 +0800
Subject: [PATCH] more disabling of session with http auth

---
 DataObjects/Core_company.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/DataObjects/Core_company.php b/DataObjects/Core_company.php
index aca5be84..ac634497 100644
--- a/DataObjects/Core_company.php
+++ b/DataObjects/Core_company.php
@@ -134,7 +134,9 @@ class Pman_Core_DataObjects_Core_Company extends DB_DataObject
     {
         $db = $this->getDatabaseConnection();
         $sesPrefix = $db->dsn['database'];
-        @session_start();
+        if  (empty($_SERVER['PHP_AUTH_USER'])) {
+            @session_start();
+        }
         if (!empty($_SESSION[__CLASS__][$sesPrefix .'-auth'])) {
             // in session...
             $a = unserialize($_SESSION[__CLASS__][$sesPrefix .'-auth']);
-- 
2.39.2