fixes #1322 - "remember me" cookie code is cleared when a user is banned

git-svn-id: http://code.elgg.org/elgg/trunk@3775 36083f99-b078-4883-b0ff-0f9b5a30f544

diff --git a/engine/lib/users.php b/engine/lib/users.php
index 0857c520af6eb41a34dcc675bd7b71c49661ab37..801eb862b27271e6f4428f51e1ff0059abcacb67 100644 (file)
--- a/engine/lib/users.php
+++ b/engine/lib/users.php
@@ -481,7 +481,11 @@ function ban_user($user_guid, $reason = "") {
                        if ($reason) {
                                create_metadata($user_guid, 'ban_reason', $reason,'', 0, ACCESS_PUBLIC);
                        }
-
+                       
+                       // clear "remember me" cookie code so user cannot login in using it
+                       $user->code = "";
+                       $user->save();
+                       
                        // Set ban flag
                        return update_data("UPDATE {$CONFIG->dbprefix}users_entity set banned='yes' where guid=$user_guid");
                }