From 89b7f2b7d9572a08b32450cb1604478ce066a064 Mon Sep 17 00:00:00 2001
From: Alan Knowles <alan@roojs.com>
Date: Tue, 3 Nov 2020 14:38:35 +0800
Subject: [PATCH] http auth do not use sessions.

---
 DataObjects/Core_person.php | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/DataObjects/Core_person.php b/DataObjects/Core_person.php
index 5160b4e3..0c17a7de 100644
--- a/DataObjects/Core_person.php
+++ b/DataObjects/Core_person.php
@@ -251,7 +251,10 @@ class Pman_Core_DataObjects_Core_person extends DB_DataObject
     //   ---------------- authentication / passwords and keys stuff  ----------------
     function isAuth()
     {
-        @session_start();
+        // do not start a session if we are using http auth...
+        if (empty($_SERVER['PHP_AUTH_USER'])) {
+            @session_start();
+        }
        
         $ff= HTML_FlexyFramework::get();
        
-- 
2.39.2