From 607c517d28e5ae565d44858bf3e0d862716b511d Mon Sep 17 00:00:00 2001 From: Kevin Chung Date: Mon, 9 Sep 2019 21:18:07 -0400 Subject: [PATCH] Avoid exception on session without a valid user and force logout (#1106) * Avoid exception on sessions without a valid user and force logout --- CTFd/utils/initialization/__init__.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/CTFd/utils/initialization/__init__.py b/CTFd/utils/initialization/__init__.py index 00abbf75..da3e1123 100644 --- a/CTFd/utils/initialization/__init__.py +++ b/CTFd/utils/initialization/__init__.py @@ -22,6 +22,7 @@ from CTFd.utils.user import authed, get_ip, get_current_user, get_current_team from CTFd.utils.modes import generate_account_url from CTFd.utils.config import is_setup from CTFd.utils.security.csrf import generate_nonce +from CTFd.utils.security.auth import logout_user from CTFd.utils.config.visibility import ( accounts_visible, @@ -165,10 +166,9 @@ def init_request_processors(app): try: db.session.commit() - except (InvalidRequestError, IntegrityError) as e: - print(e.message) + except (InvalidRequestError, IntegrityError): db.session.rollback() - session.clear() + logout_user() if authed(): user = get_current_user()