double check session id has been initialized

This commit is contained in:
Martin Willi
2009-09-10 20:51:43 +02:00
parent 356b2b2780
commit 31f87c29c7
+1 -1
View File
@@ -259,7 +259,7 @@ static void dispatch(private_dispatcher_t *this)
continue;
}
/* find by session ID. Prevent session hijacking by host check */
if (!found && sid &&
if (!found && sid && current->session->get_sid(current->session) &&
streq(current->session->get_sid(current->session), sid) &&
streq(current->host, request->get_host(request)))
{