Merge pull request #7982 from Oldiesmann/fix_tfa_cookie

Ensure the member is always an int when setting TFA cookies
SimpleMachines · Dec 30, 2023 · af6df6b · af6df6b
2 parents 260536f + 7e67daa
commit af6df6b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Sources/Cookie.php b/Sources/Cookie.php
@@ -179,7 +179,7 @@ public function __construct(
 
 		// Special case for the login and TFA cookies.
 		if (in_array($this->name, [Config::$cookiename, Config::$cookiename . '_tfa'])) {
-			$this->member = $this->custom_data[0] ?? User::$me->id;
+			$this->member = (int) ($this->custom_data[0] ?? User::$me->id);
 			$this->hash = $this->custom_data[1] ?? self::encrypt(User::$me->passwd, User::$me->password_salt);
 
 			$expires = $expires ?? $this->custom_data[2] ?? null;