Session data not updated when current user data changes

[kompa3]

I just found out a possible bug in Joomla 1.7.2.

Summary: The session user object is not updated when the current user changes his information (eg. name) in the profile edit view (option=com_users&view=profile).

The steps to reproduce the bug:
1) Log in to the front-end
2) Edit my profile information; change my name ("Old Name" -> "New Name")
3) After saving the profile information, the Login Form module on the left side still remembers my old name "Hi Old Name,"

Ok, if I log out and log in again the situation is corrected.

After examining the code I think there is an error in plugins/user/joomla/joomla.php:
- in onUserLogin() the current user object is stored onto the session
- however, in onUserAfterSave() the user object in the session is not updated
-> in my opinion, it should be updated if the user in concern is the current user in the session

[kompa3]

I think the following could work, inserted into line 114 of plugins/user/joomla/joomla.php:
(last else block of onUserAfterSave)

// Update session data if the current user was updated
$currentUser = JFactory::getUser();
if ($currentUser->id == $user['id'])
{
$session = JFactory::getSession();
$session->set('user', new JUser($currentUser->id)); // Force load from database
}

[rainweb]

Thanks kompa3, i was looking for this.

[televisi]

Hi,

Sorry to revive old post; I suspect this is not working for Joomla 3.2?

I tried your method, unfortunately not working

Thanks

[DeeEmm]

televisi, the hack still works but you need to insert it on a different line.

Insert the code after the line below

// Existing user - nothing to do...yet.

It's about line 153

[ihtus]

this worked for me (found here http://forum.joomla.org/viewtopic.php?p=2725238)

Code: Select all

	/libraries/joomla/user/user.php
	
find:
		if (empty($this->_authLevels))
		{
			$this->_authLevels = JAccess::getAuthorisedViewLevels($this->id);
		}

replace with:
		if (empty($this->_authLevels)
			|| $this->_authLevels != JAccess::getAuthorisedViewLevels($this->id)
		)
		{
			$this->_authLevels = JAccess::getAuthorisedViewLevels($this->id);
		}