diff --git a/inc/database.php b/inc/database.php index 55244b7..e2605f2 100755 --- a/inc/database.php +++ b/inc/database.php @@ -169,11 +169,15 @@ class DataBase extends SQLite3 { $token = base64_decode($_COOKIE['token']); } $hashed = hash('sha256', $token); - $sql = "SELECT id AS id, userid AS userid FROM tokens WHERE token='$hashed';"; + $sql = "SELECT id AS id, userid AS userid, expires AS expires FROM tokens WHERE token='$hashed';"; $ret = $this->query($sql)->fetchArray(SQLITE3_ASSOC); if(!$ret) { return false; } + if ($ret['expires'] < time()) { + $this->tokenRemove($token); + return false; + } $this->tokenRefresh($ret['id']); return $ret['userid']; }