This fixes a copy and paste mistake in
6096fe159bbcae95b54abe0cfdb8eba0774dffc5.
This mistake did not introduce a security issue, because the session timeout is
also checked when loading the session, instead of just relying on the cronjob
pruning the session.
public function prune() {
// Prevent the sessions from expiring while the development mode is active.
if (!ENABLE_DEBUG_MODE || !ENABLE_DEVELOPER_TOOLS) {
- $sql = "DELETE FROM wcf".WCF_N."_user_session
+ $sql = "DELETE FROM wcf".WCF_N."_acp_session
WHERE lastActivityTime < ?";
$statement = WCF::getDB()->prepareStatement($sql);
$statement->execute([