From 2e2153387d9c52ee916685bb58e02b64b0b70846 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Tim=20D=C3=BCsterhus?= Date: Wed, 20 Jan 2021 17:03:14 +0100 Subject: [PATCH] Fix pruning of ACP sessions This fixes a copy and paste mistake in 6096fe159bbcae95b54abe0cfdb8eba0774dffc5. This mistake did not introduce a security issue, because the session timeout is also checked when loading the session, instead of just relying on the cronjob pruning the session. --- .../install/files/lib/system/session/SessionHandler.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wcfsetup/install/files/lib/system/session/SessionHandler.class.php b/wcfsetup/install/files/lib/system/session/SessionHandler.class.php index 95d3b8c941..4b66a5d232 100644 --- a/wcfsetup/install/files/lib/system/session/SessionHandler.class.php +++ b/wcfsetup/install/files/lib/system/session/SessionHandler.class.php @@ -1145,7 +1145,7 @@ final class SessionHandler extends SingletonFactory { public function prune() { // Prevent the sessions from expiring while the development mode is active. if (!ENABLE_DEBUG_MODE || !ENABLE_DEVELOPER_TOOLS) { - $sql = "DELETE FROM wcf".WCF_N."_user_session + $sql = "DELETE FROM wcf".WCF_N."_acp_session WHERE lastActivityTime < ?"; $statement = WCF::getDB()->prepareStatement($sql); $statement->execute([ -- 2.20.1