Skip to content

ldap_required can destroy an active session more than once #18

@cjg89

Description

@cjg89

It looks like ldap_required() is capable of calling ldap_destroy_session() multiple times in a single page load, which will throw a session_destroy(): Trying to destroy uninitialized session warning.

This situation occurs when a user logs in to the UIL lookup, then clicks the "log out" link at the top of the page. I'm not sure yet if there's any other instances where this would occur.

https://github.com/UCF/Brand-Theme/blob/master/functions.php#L119-L176

Metadata

Metadata

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions