Fixed issue: [security] Possible session fixation on survey entry wit…

…h token
LimeSurvey · Dec 2, 2016 · 47107ee · 47107ee
1 parent 5f5cce8
commit 47107ee
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/application/helpers/frontend_helper.php b/application/helpers/frontend_helper.php
@@ -1656,6 +1656,7 @@ function renderRenderWayForm($renderWay, array $redata, array $scenarios, $sTemp
  */
 function resetAllSessionVariables($surveyid)
 {
+    Yii:app()->session->regenerateID(true);
     unset($_SESSION['survey_'.$surveyid]['grouplist']);
     unset($_SESSION['survey_'.$surveyid]['fieldarray']);
     unset($_SESSION['survey_'.$surveyid]['insertarray']);