X-Git-Url: https://git.wh0rd.org/?p=tt-rss.git;a=blobdiff_plain;f=classes%2Fhandler%2Fpublic.php;h=7cce7d71b061d24f5bf1f93093b9b5173456e354;hp=e892a9797003c05302acac45cef2f17e62acb9d2;hb=65e98f40867862eb345676e23b633b9f52109d30;hpb=74736fce0f89efbaa971e6817303e8840c4aed8f

diff --git a/classes/handler/public.php b/classes/handler/public.php
index e892a979..7cce7d71 100755
--- a/classes/handler/public.php
+++ b/classes/handler/public.php
@@ -476,8 +476,6 @@ class Handler_Public extends Handler {
 				session_set_cookie_params(0);
 			}
 
-			@session_start();
-
 			if (authenticate_user($login, $password)) {
 				$_POST["password"] = "";
 
@@ -501,6 +499,10 @@ class Handler_Public extends Handler {
 					}
 				}
 			} else {
+
+				// start an empty session to deliver login error message
+				@session_start();
+
 				$_SESSION["login_error_msg"] = __("Incorrect username or password");
 				user_error("Failed login attempt for $login from {$_SERVER['REMOTE_ADDR']}", E_USER_WARNING);
 			}