From 5d0f748f3c5410fea4c89a85e2fa73eac4229f45 Mon Sep 17 00:00:00 2001 From: Christian Land Date: Wed, 28 Sep 2022 10:42:01 +0200 Subject: [PATCH] "Remember Me" Improvement Fixes an edge case (described in Ticket #1570) where people were able to login if the "Remember Me" feature was disabled in the app but people still had old "Remember Me" cookies. --- libraries/Ion_auth.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libraries/Ion_auth.php b/libraries/Ion_auth.php index f567b1b2a..9b112de30 100644 --- a/libraries/Ion_auth.php +++ b/libraries/Ion_auth.php @@ -359,7 +359,7 @@ public function logged_in() $recheck = $this->ion_auth_model->recheck_session(); // auto-login the user if they are remembered - if (!$recheck && get_cookie($this->config->item('remember_cookie_name', 'ion_auth'))) + if (!$recheck && ($this->config->item('remember_users', 'ion_auth')) && get_cookie($this->config->item('remember_cookie_name', 'ion_auth'))) { $recheck = $this->ion_auth_model->login_remembered_user(); }