Rotate session ID on login and fix client portal Entra SSO

This commit is contained in:
johnnyq
2026-07-27 23:49:09 -04:00
parent 22e93589cb
commit c64c76c577
7 changed files with 79 additions and 69 deletions

View File

@@ -22,16 +22,7 @@ if($config_client_portal_enable == 0) {
exit();
}
if (!isset($_SESSION)) {
// HTTP Only cookies
ini_set("session.cookie_httponly", true);
ini_set("session.cookie_samesite", "Lax");
if ($config_https_only) {
// Tell client to only send cookie(s) over HTTPS
ini_set("session.cookie_secure", true);
}
session_start();
}
require_once __DIR__ . "/../includes/session_init.php";
// Set Timezone after session
require_once "../includes/inc_set_timezone.php";