From: Alexander Ebert <ebert@woltlab.com>
Date: Tue, 7 Apr 2015 18:38:47 +0000 (+0200)
Subject: Properly inheriting SECURITY_TOKEN for virtual sessions
X-Git-Tag: 2.1.3~29^2
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=c0b043dfcada9871f8ad37c4f9f7186bb2b88757;p=GitHub%2FWoltLab%2FWCF.git

Properly inheriting SECURITY_TOKEN for virtual sessions
---

diff --git a/wcfsetup/install/files/lib/system/session/SessionHandler.class.php b/wcfsetup/install/files/lib/system/session/SessionHandler.class.php
index 2e72d28c32..4a6ad93d0f 100644
--- a/wcfsetup/install/files/lib/system/session/SessionHandler.class.php
+++ b/wcfsetup/install/files/lib/system/session/SessionHandler.class.php
@@ -811,6 +811,12 @@ class SessionHandler extends SingletonFactory {
 					
 					// inherit existing session
 					$this->session = $session;
+					
+					// inherit security token
+					$variables = @unserialize($this->session->sessionVariables);
+					if (is_array($variables) && !empty($variables['__SECURITY_TOKEN'])) {
+						$this->register('__SECURITY_TOKEN', $variables['__SECURITY_TOKEN']);
+					}
 				}
 			break;
 		}