reopen 637486
thanks

The patch proposed by Eduardo only fixed the logout, but not the
autologin that other people were seeing.  The solution is to add another
to_s conversion for autologin.

Patch attached.


        Ender.
--- account_controller.rb.orig  2011-09-01 12:32:41.000000000 +0000
+++ account_controller.rb       2011-09-01 12:32:52.000000000 +0000
@@ -204,7 +204,7 @@
     # generate a key and set cookie if autologin
     if params[:autologin] && Setting.autologin?
       token = Token.create(:user => user, :action => 'autologin')
-      cookies[:autologin] = { :value => token.value, :expires => 
1.year.from_now }
+      cookies[:autologin.to_s] = { :value => token.value, :expires => 
1.year.from_now }
     end
     call_hook(:controller_account_success_authentication_after, {:user => user 
})
     redirect_back_or_default :controller => 'my', :action => 'page'

Reply via email to