allow # in email subjects

[wfpl.git] / session.php

diff --git a/session.php b/session.php
index 26523c2..9013157 100644 (file)
--- a/session.php
+++ b/session.php
@@ -56,7 +56,7 @@ function session_new($length = 86400) {
        db_insert('wfpl_sessions', 'session_key,length', $session_key, $length);
        $GLOBALS['session_id'] = db_auto_id();
        $GLOBALS['session_key'] = $session_key;
-       $_REQUEST['session_key'] = $session_key; #just in case someone calls session_exists() after session_new()
+       $_COOKIE['session_key'] = $session_key; #just in case someone calls session_exists() after session_new()
        session_touch($length);
        return $GLOBALS['session_key'];
 }
@@ -99,7 +99,7 @@ function session_purge_old() {
 
 # return true if a session exists
 function session_exists() {
-       if(!isset($_REQUEST['session_key'])) {
+       if(!isset($_COOKIE['session_key'])) {
                return false;
        }
 
@@ -107,7 +107,7 @@ function session_exists() {
                return true;
        }
 
-       $session_key = ereg_replace('[^a-zA-Z0-9]', '', $_REQUEST['session_key']);
+       $session_key = ereg_replace('[^a-zA-Z0-9]', '', $_COOKIE['session_key']);
 
        if(!strlen($session_key) == 16) {
                return false;
@@ -170,7 +170,7 @@ function logged_in_as_admin() {
 }
 
 
-# find existing session, or make one
+# find existing session, or make one (name "session_init" was taken)
 function init_session() {
        if(!session_exists()) {
                session_new();