AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-08-05 07:07:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Rotate session ID on login and fix client portal Entra SSO

Browse Source
This commit is contained in:
johnnyq
2026-07-27 23:49:09 -04:00
parent 22e93589cb
commit c64c76c577
7 changed files with 79 additions and 69 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
includes/session_init.php
View File

@@ -1,11 +1,14 @@
<?php
if (!isset($_SESSION)) {
if (session_status() === PHP_SESSION_NONE) {
// HTTP Only cookies
ini_set("session.cookie_httponly", true);
ini_set("session.cookie_samesite", "Lax");
if ($config_https_only) {
// Refuse to adopt a session ID the server never issued
ini_set("session.use_strict_mode", 1);
if (!isset($config_https_only) || $config_https_only) {
// Tell client to only send cookie(s) over HTTPS
ini_set("session.cookie_secure", true);
}