Add HttpOnly, Secure, and Samesite session settings to config.conf (#7548)

* Add HttpOnly, Secure, and Samesite session settings to config.conf

* Update upgrade_menu.php

* Update upgrade.php

* Update install.php
This commit is contained in:
Alex
2025-10-03 15:35:50 -07:00
committed by GitHub
parent 88ac778135
commit 0c76c4bee1
4 changed files with 18 additions and 3 deletions

View File

@@ -112,6 +112,11 @@
$conf .= "php.dir = ".$php_dir."\n";
$conf .= "php.bin = php\n";
$conf .= "\n";
$conf .= "#session settings\n";
$conf .= "session.cookie_httponly = true\n";
$conf .= "session.cookie_secure = true\n";
$conf .= "session.cookie_samesite = Lax\n";
$conf .= "\n";
$conf .= "#cache settings\n";
$conf .= "cache.method = file\n";
$conf .= "cache.location = ".$cache_location."\n";