The code below was introduced into the EE 2.6 Session class (line 459):
if ($this->userdata[‘session_id’] == 0)
{
// just to be sure
$this->fetch_guest_data();
return;
}
When the session_id starts with a letter (mine did), it evaluates to 0 and passes the test. As a result the session is not destroyed. The solution is to change the test to === as shown below.
if ($this->userdata[‘session_id’] === 0)
{
// just to be sure
$this->fetch_guest_data();
return;
}
Can someone confirm that my change is appropriate?