diff --git a/include/class.auth.php b/include/class.auth.php index a4f32d86bfc3ed88e9fd100a2309cbd58a172a41..812f6621599a3225c24157d79642eef2f900ef93 100644 --- a/include/class.auth.php +++ b/include/class.auth.php @@ -365,16 +365,14 @@ abstract class StaffAuthenticationBackend extends AuthenticationBackend { list($id, $auth) = explode(':', $_SESSION['_auth']['staff']['key']); if (!($bk=static::getBackend($id)) //get the backend - || !$bk->supportsAuthentication() //Make sure it can authenticate || !($staff = $bk->validate($auth)) //Get AuthicatedUser || !($staff instanceof Staff) || $staff->getId() != $_SESSION['_auth']['staff']['id'] // check ID - ) + ) return null; $staff->setAuthKey($_SESSION['_auth']['staff']['key']); - return $staff; }