From 79d3c716e38084beab01d34a5f49a5aee7e72526 Mon Sep 17 00:00:00 2001 From: Snap Date: Sat, 25 Apr 2015 22:30:21 -0700 Subject: Some work on the Chat. Fixed bug where user could chat as "SERVER" --- ajax/chat.ajax.php | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'ajax/chat.ajax.php') diff --git a/ajax/chat.ajax.php b/ajax/chat.ajax.php index 1574bde..576ab39 100644 --- a/ajax/chat.ajax.php +++ b/ajax/chat.ajax.php @@ -52,6 +52,9 @@ if (isset($_REQUEST['messages'])) { } } //Don't lockout requests by holding the session file open! + +$isLoggedIn = ($_SESSION['accepted'] == 1); + session_write_close(); $userID = $_SESSION['userID']; @@ -74,8 +77,19 @@ require_once('../includes/chats.php'); enterChannel($userID); $sent = false; +//User is sending a message if (isset($_REQUEST['messages'])) { $date = isMuted($userID); + if ($isLoggedIn !== true) { + $r[0]['error'] = 'Logged out'; + $r[0]['serverMessage'] = 'true'; + $r[0]['message'] = "Whoops, your session has timed out. Please sign in again."; + $r[0]['secondsSince'] = 0; + $r[0]['displayName'] = 'SERVER'; + $r[0]['userID'] = null; + echo json_encode($r); + exit; + } if ($date !== false) { $r[0]['error'] = 'Muted'; $r[0]['serverMessage'] = 'true'; -- cgit v1.2.3