From 6861fa9cedb368a7e21e51c73de2382b5c2a4e67 Mon Sep 17 00:00:00 2001 From: Martin Naumann Date: Mon, 1 Dec 2014 19:43:07 +0100 Subject: [PATCH] Re-adding the session_cookie_params --- lib/settings-common.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/settings-common.php b/lib/settings-common.php index d620a96..5a1b27f 100644 --- a/lib/settings-common.php +++ b/lib/settings-common.php @@ -32,12 +32,14 @@ function session_start_safe() { // Create a new session with the default path. session_destroy(); session_save_path(''); - session_start(); + session_start(); } } // Start a session if we haven't already if(!isset($_SESSION)) { + // Make the session cookie HTTP only + session_set_cookie_params(0, '/', '', false, true); session_start_safe(); }