likely the last commit had a serious vulnerability. this is just a sync

functions/init.php

@@ -16,6 +16,11 @@ require_once 'functions/space.php';
 if (!isset($_SESSION['initialized'])) {
   $_SESSION['initialized'] = true;
   $_SESSION['theme'] = 'dark';
+  if (isset($_SESSION['user'])) {
+    $tmp = unserialize($_SESSION['user'])->getSpaces();
+    foreach ($tmp as $s)
+      $_SESSION['spaces'][] = serialize($s->getSpace());
+  }
 } else if (isset($_POST['theme'])) {
   $_SESSION['theme'] = $_POST['theme'];
   unset($_POST['theme']);
@@ -26,3 +31,6 @@ if (!isset($_SESSION['initialized'])) {
 define('owner', 1);
 define('developer', 2);
 define('user', 3);
+
+if (isset($_SESSION['user']) && !isset($GLOBALS['spaces'])) {
+}