create_unique_session_value hat immer falsch auf Eindeutigkeit der Nummer geprüft

[mfinanz.git] / SL / Auth.pm

diff --git a/SL/Auth.pm b/SL/Auth.pm
index b1e4b25e93d57887d33412eff207b777c0982141..76414e877ba01980d8ccedbc95fce8036535323b 100644 (file)
--- a/SL/Auth.pm
+++ b/SL/Auth.pm
@@ -730,7 +730,7 @@ sub create_unique_sesion_value {
   my $key                   = "$$-" . ($now[0] * 1000000 + $now[1]) . "-";
   $self->{unique_counter} ||= 0;
 
-  $self->{unique_counter}++ while exists $self->{SESSION}->{$key . $self->{unique_counter}};
+  $self->{unique_counter}++ while exists $self->{SESSION}->{$key . ($self->{unique_counter} + 1)};
   $self->{unique_counter}++;
 
   $value  = { expiration => $params{expiration} ? ($now[0] + $params{expiration}) * 1000000 + $now[1] : undef,