2.1.27

Fix for #1870, #1872

admin.php

@@ -14,8 +14,8 @@
 
 if (!isset($_SESSION['CPM']) || $_SESSION['CPM'] != 1 ||
     !isset($_SESSION['user_id']) || empty($_SESSION['user_id']) ||
-    !isset($_SESSION['key']) || empty($_SESSION['key']))
-{
+    !isset($_SESSION['key']) || empty($_SESSION['key'])
+) {
     die('Hacking attempt...');
 }
 

changelog.md

@@ -6,6 +6,8 @@
  Database password is encrypted in settings.php file
  PHPMailer library updated to 5.2.23
  Configuration variables are not set in SESSION anymore. Now read from tp.config.php file.
+ #1872 New Admin User login not working -JSON Parse file failure
+ #1870 Logic issue in headers sending
  #1866 CSV import with empty url leads to value 0
  #1862 Import from Keepass.xml to Personalfolder no access to Item
  #1857 API: Folders created at level 0 instead of correct level

index.php

@@ -31,7 +31,7 @@
 if (!file_exists('includes/config/settings.php')) {
     // This should never happen, but in case it does
     // this means if headers are sent, redirect will fallback to JS
-    if (!headers_sent()) {
+    if (headers_sent()) {
         echo '<script language="javascript" type="text/javascript">document.location.replace("install/install.php");</script>';
     } else {
         header('Location: install/install.php');
@@ -517,7 +517,7 @@ class="ui-state-highlight ui-corner-all" id="div_maintenance">
         }
     // Ask the user to change his password
     } elseif (($session_validite_pw === null || $session_validite_pw === false)
-        && empty($session_user_id) === false && $session_is_admin !== '1'
+        && empty($session_user_id) === false
     ) {
         //Check if password is valid
         echo '