if empty session is autostarted because of a cookie, immediately destroy it

diff --git a/include/sessions.php b/include/sessions.php
index f625cd16f59415f7c672662dffba84bc2afae88b..2d17bfd8e388363edef677662e8ac4db944649f2 100644 (file)
--- a/include/sessions.php
+++ b/include/sessions.php
@@ -160,5 +160,9 @@
        if (!defined('NO_SESSION_AUTOSTART')) {
                if (isset($_COOKIE[session_name()])) {
                        @session_start();
+
+                       if (!$_SESSION['uid']) {
+                               logout_user();
+                       }
                }
        }