summaryrefslogtreecommitdiffstats
path: root/examples/server
diff options
context:
space:
mode:
authorJosh Hoyt <josh@janrain.com>2006-02-09 16:46:24 +0000
committerJosh Hoyt <josh@janrain.com>2006-02-09 16:46:24 +0000
commit98e0e1fccfae85ee9ceea27499c2c0b9eb0c0d3c (patch)
tree81e6a3a877a941b7046d5e66df856320430fd2c0 /examples/server
parent470c2f717bb00b5cb1619d22e3af8e156f736a40 (diff)
downloadphp-openid-98e0e1fccfae85ee9ceea27499c2c0b9eb0c0d3c.zip
php-openid-98e0e1fccfae85ee9ceea27499c2c0b9eb0c0d3c.tar.gz
php-openid-98e0e1fccfae85ee9ceea27499c2c0b9eb0c0d3c.tar.bz2
[project @ Make sure that the trust function always takes into account the logged in user]
Diffstat (limited to 'examples/server')
-rw-r--r--examples/server/lib/session.php5
1 files changed, 5 insertions, 0 deletions
diff --git a/examples/server/lib/session.php b/examples/server/lib/session.php
index f44fb94..2c7d18f 100644
--- a/examples/server/lib/session.php
+++ b/examples/server/lib/session.php
@@ -92,6 +92,11 @@ function isTrusted($identity_url, $trust_root)
{
// from config.php
global $trusted_sites;
+
+ if ($identity_url != getLoggedInUser()) {
+ return false;
+ }
+
if (in_array($trust_root, $trusted_sites)) {
return true;
}