Immediately destroy the session for banned users
authorTim Düsterhus <duesterhus@woltlab.com>
Thu, 12 May 2022 15:16:54 +0000 (17:16 +0200)
committerTim Düsterhus <duesterhus@woltlab.com>
Thu, 12 May 2022 15:16:54 +0000 (17:16 +0200)
commitc83452e315823214f3077fcf096d3d93e616f5eb
tree9ccf73ac6af56ba0d9034e619b1457e348217303
parent37aa9bc25f98495a80e91e46bf27c1a4798cc35d
Immediately destroy the session for banned users

The forced logout for banned users was introduced in
ab84d9cab2f864c23f0b18dbeb67e7ea79b1fe9f and only destroyed the session during
shutdown.

At the point where this check runs the request effectively is fully booted up
and in any case the NamedUserException would abort any further booting, thus it
is safe to simply destroy the session immediately to keep all the necessary
logic in a single location.
wcfsetup/install/files/lib/system/WCF.class.php