AS1024
/
itflow
mirror of https://github.com/itflow-org/itflow
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add X-Frame-Options to login pages & client portal

This commit is contained in:
Marcus Hill 2023-02-05 18:43:50 +00:00
parent 8bcd759444
commit e8c9e63a7b
4 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
login.php
View File

@ -1,5 +1,7 @@
<?php
header("X-Frame-Options: DENY");
if (!file_exists('config.php')) {
header("Location: setup.php");
exit;

2
portal/check_login.php
View File

@ -15,7 +15,7 @@ if (!isset($_SESSION)) {
session_start();
}
if (!$_SESSION['client_logged_in']) {
if (!isset($_SESSION['client_logged_in']) || !$_SESSION['client_logged_in']) {
header("Location: login.php");
die;
}

2
portal/login.php
View File

@ -4,6 +4,8 @@
* Landing / Home page for the client portal
*/
header("X-Frame-Options: DENY");
$session_company_id = 1;
require_once('../config.php');
require_once('../functions.php');

2
portal/portal_header.php
View File

@ -3,6 +3,8 @@
* Client Portal
* HTML Header
*/
header("X-Frame-Options: DENY");
?>
<!DOCTYPE html>