Two unchecked session variables (authorized, lang) now have more para…

…noid checking
WDD-Social · Jun 3, 2011 · 4908bf1 · 4908bf1
1 parent 458db7e
commit 4908bf1
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 2 deletions.
diff --git a/framework5/.DS_Store b/framework5/.DS_Store
diff --git a/framework5/wddsocial/.DS_Store b/framework5/wddsocial/.DS_Store
diff --git a/framework5/wddsocial/controller/UserSession.php b/framework5/wddsocial/controller/UserSession.php
@@ -196,7 +196,7 @@ public static function is_current($userID) {
 
 	public static function is_authorized() {
 		static::session_started();
-		if ($_SESSION['authorized'] and isset($_SESSION['user'])) return true;
+		if (isset($_SESSION['authorized']) and isset($_SESSION['user']) and is_bool($_SESSION['authorized']) and $_SESSION['authorized']) return true;
 		else return false;
 	}
 
@@ -281,7 +281,7 @@ public static function user_lang() {
 
 
 	public static function visitor_lang() {
-		if (set($_SESSION['lang'])) return $_SESSION['lang'];
+		if (isset($_SESSION['lang'])) return $_SESSION['lang'];
 		else return 'en';
 	}