version 4.23 release

app/api/sso.class.php

@@ -57,10 +57,10 @@ class SSO{
 
 
 	static public function sessionCheck($key,$value='success'){
-		$path = session_save_path();//还原session路径
+		//$path = session_save_path();//还原session路径
 		$session = self::init();
 		if( isset($session[$key]) && $session[$key] == $value){
-			session_save_path($path);
+			//session_save_path($path);
 			return true;
 		}
 		return false;
@@ -84,8 +84,11 @@ class SSO{
 			$appUrl = this_url();
 		}
 		if(!self::sessionCheck($appKey)){
+			session_destroy();
 			header('Location: '.$authUrl.'&link='.rawurlencode($appUrl));
 			exit;
 		}
 	}
 }
+
+

plugins/adminer/adminer/index.php

@@ -11,7 +11,6 @@
 @ignore_user_abort(true);
 @set_time_limit(3600*2);//set_time_limit(0)  1day
 @ini_set('memory_limit','2028M');//2G;
-
 include('./../../../app/api/sso.class.php');
 SSO::sessionAuth('AdminerAccess','check=roleID&value=1');
 class AdminerSoftware extends Adminer {