Fix bug in session handler

[qtadmin.git] / lib / utils.inc.php

diff --git a/lib/utils.inc.php b/lib/utils.inc.php
index 723a133080e51f2d0a915200edd928c062945a61..4645e2431c25fc23885d5e9cb59407ad18d7083f 100644 (file)
--- a/lib/utils.inc.php
+++ b/lib/utils.inc.php
@@ -75,6 +75,8 @@ class Utils implements Serializable {
     private function startSession() {
         global $CFG;
 
+        session_unset();
+        session_destroy();
         if (isset($CFG->session_timeout)) {
             $this->timeout = $CFG->session_timeout * 60;
         } else {
@@ -94,10 +96,11 @@ class Utils implements Serializable {
     public static function getInstance() {
         global $CFG;
 
+        session_start();
         if (!is_object(self::$_instance)) {
             if (isset($_SESSION['Utils'])) {
                 self::$_instance = unserialize($_SESSION['Utils']);
-                file_put_contents('/tmp/dump', 'Unserialize called: '.var_export($this, true), FILE_APPEND);
+                file_put_contents('/tmp/dump', 'Unserialize called: '.var_export(self::$_instance, true), FILE_APPEND);
             } else {
                 self::$_instance = new Utils();
             }
@@ -107,10 +110,10 @@ class Utils implements Serializable {
         if (isset($_SESSION['LAST_ACTIVITY']) &&
                 ($time - $_SESSION['LAST_ACTIVITY']) >= self::$_instance->timeout) {
             echo 'R_TIME: '.date('c', $time).' L_ACT: '.date('c', $_SESSION['LAST_ACTIVITY']);
-            exit;
+            //exit;
             session_unset();
             session_destroy();
-            self::$_instance = null;
+            self::$_instance->user = null;
             self::$_instance->is_admin = false;
             $_SESSION['Utils'] = serialize(self::$_instance);
         } else {
@@ -216,7 +219,7 @@ class Utils implements Serializable {
         if ($loggedIn == false) {
             echo '$this->user: '.$this->user.' $_SESSION[\'user\']: '.$_SESSION['user'];
             echo 'R_TIME: '.date('c', $_SERVER['REQUEST_TIME']).' L_ACT: '.date('c', $_SESSION['LAST_ACTIVITY']);
-            exit;
+            //exit;
         }
 
         $_SESSION['Utils'] = serialize($this);