only autostart session if login cookie exists

[tt-rss.git] / include / sessions.php

diff --git a/include/sessions.php b/include/sessions.php
index 3355ec49e8326faacd21a6cf612133afe8a43bdd..a83daea82489d77ba561f4f4e2b37513eb56bd48 100644 (file)
--- a/include/sessions.php
+++ b/include/sessions.php
@@ -105,6 +105,8 @@
        session_set_cookie_params(SESSION_COOKIE_LIFETIME);
 
        if (!defined('TTRSS_SESSION_NAME') || TTRSS_SESSION_NAME != 'ttrss_api_sid') {
-               @session_start();
+               if ($_COOKIE[$session_name]) {
+                       @session_start();
+               }
        }
 ?>