Permalink
Browse files

chg: correctly compare 2fa and plain login session timestamps.

Signed-off-by: Me <corbolais@gmail.com>
  • Loading branch information...
corbolais committed Apr 11, 2018
1 parent 58fcecd commit 5bd5d77b8bc731ae63f84316fedcdf939be230e4
Showing with 1 addition and 1 deletion.
  1. +1 −1 twofactor_gauthenticator.php
@@ -133,7 +133,7 @@ function check_2FAlogin($p)
}
}
// we're into some task but marked with login...
elseif($rcmail->task !== 'login' && ! $_SESSION['twofactor_gauthenticator_2FA_login'] >= $_SESSION['twofactor_gauthenticator_2FA_login'])
elseif($rcmail->task !== 'login' && ! $_SESSION['twofactor_gauthenticator_2FA_login'] >= $_SESSION['twofactor_gauthenticator_login'])
{
$this->__exitSession();
}

0 comments on commit 5bd5d77

Please sign in to comment.