Regenerate session id after entering password

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>

1 files changed, 2 insertions, 0 deletions

diff --git a/lib/Controller/PageController.php b/lib/Controller/PageController.php
index fc86dda56..96b541de6 100644
--- a/lib/Controller/PageController.php
+++ b/lib/Controller/PageController.php
@@ -228,6 +228,7 @@ class PageController extends Controller {
 					$passwordVerification = $room->verifyPassword($password);
 
 					if ($passwordVerification['result']) {
+						$this->talkSession->renewSessionId();
 						$this->talkSession->setPasswordForRoom($token, $password);
 					} else {
 						$this->talkSession->removePasswordForRoom($token);
@@ -293,6 +294,7 @@ class PageController extends Controller {
 
 			$passwordVerification = $room->verifyPassword($password);
 			if ($passwordVerification['result']) {
+				$this->talkSession->renewSessionId();
 				$this->talkSession->setPasswordForRoom($token, $password);
 			} else {
 				$this->talkSession->removePasswordForRoom($token);