Fix bug in Framework::getCurrentUser() function

If, by some means, the GUID for a logged in user is not valid, that session should be terminated ("$this->setCurrentUser();")
This might happen if the database gets flushed, or if an account gets removed while it is in use...

1 files changed, 8 insertions, 1 deletions

diff --git a/app/class/framework.class.php b/app/class/framework.class.php
index 74c4b14..4223d68 100644
--- a/app/class/framework.class.php
+++ b/app/class/framework.class.php
@@ -57,7 +57,14 @@ abstract class Framework
     function getCurrentUser()
     {
         if (isset($_SESSION['userguid']))
-            return new User($_SESSION['userguid']);
+        {
+            $user = new User($_SESSION['userguid']);
+
+            if ($user->type == "user")
+                return $user;
+
+            $this->setCurrentUser();
+        }
 
         return false;
     }