Fix offset error on invalid remember token (#34020)

laravel · Aug 26, 2020 · 134f1dc · 134f1dc
1 parent 0fc3711
commit 134f1dc
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Illuminate/Session/Middleware/AuthenticateSession.php b/src/Illuminate/Session/Middleware/AuthenticateSession.php
@@ -40,9 +40,9 @@ public function handle($request, Closure $next)
         }
 
         if ($this->auth->viaRemember()) {
-            $passwordHash = explode('|', $request->cookies->get($this->auth->getRecallerName()))[2];
+            $passwordHash = explode('|', $request->cookies->get($this->auth->getRecallerName()))[2] ?? null;
 
-            if ($passwordHash != $request->user()->getAuthPassword()) {
+            if (! $passwordHash || $passwordHash != $request->user()->getAuthPassword()) {
                 $this->logout($request);
             }
         }