diff --git a/framework/base/helper.class.php b/framework/base/helper.class.php index 5cb2e903a0..c85fb54397 100644 --- a/framework/base/helper.class.php +++ b/framework/base/helper.class.php @@ -743,6 +743,7 @@ class baseHelper */ public static function restartSession($sessionID = '') { + if(!preg_match('/^\w+$/', $sessionID)) $sessionID = ''; if(empty($sessionID)) $sessionID = sha1(mt_rand()); session_write_close();