mirror of
https://github.com/itflow-org/itflow
synced 2026-07-26 18:27:14 +00:00
565aff35f6
Applied at all seven session_start sites. keepalive.php and guest_post.php had no cookie flags at all and now set httponly and secure too.
16 lines
325 B
PHP
16 lines
325 B
PHP
<?php
|
|
|
|
if (!isset($_SESSION)) {
|
|
// HTTP Only cookies
|
|
ini_set("session.cookie_httponly", true);
|
|
ini_set("session.cookie_samesite", "Lax");
|
|
|
|
if ($config_https_only) {
|
|
// Tell client to only send cookie(s) over HTTPS
|
|
ini_set("session.cookie_secure", true);
|
|
}
|
|
|
|
session_start();
|
|
|
|
}
|