Merge pull request #458 from DrDoof/fix/httpd-session-init

httpd: do not accept a session cookie before the first login
This commit is contained in:
René van Dorst authored and GitHub committed 2026-09-15 18:14:27 +00:00
commit 94992562fd
1 file changed
+1 -1
+1 -1
View File
@@ -340,7 +340,7 @@ __xdata uint8_t *scan_header(__xdata uint8_t * __xdata p)
read_reg_timer(&now); read_reg_timer(&now);
if (session) { if (session && session_id[0]) {
if (now - last_session_use > SESSION_TIMEOUT) { if (now - last_session_use > SESSION_TIMEOUT) {
dbg_string("Session expired\n"); dbg_string("Session expired\n");
} else { } else {