Single session Admin can be set in the misc settings

2024-10-18 10:55:07 +07:00
parent 5f6b14ab7e
commit f0da633808
3 changed files with 26 additions and 1 deletions
--- a/system/autoload/Admin.php
+++ b/system/autoload/Admin.php
@ -149,7 +149,14 @@ class Admin

    public static function validateToken($aid, $cookieToken)
    {
+        global $config;
        $query =  ORM::for_table('tbl_users')->select('login_token')->findOne($aid);
+        if($config['single_session'] != 'yes'){
+            return true; // For multi-session, any token is valid
+        }
+        if(empty($query)){
+            return true;
+        }
        return $query->login_token === sha1($cookieToken);
    }
 }