Check if the session is started to prevent PHP warnings (#7604)

This commit is contained in:
Alex
2025-11-03 13:20:05 -07:00
committed by GitHub
parent 745d998252
commit 396b025537

View File

@@ -89,7 +89,7 @@
$database = database::new(['config' => $config]); $database = database::new(['config' => $config]);
//security headers //security headers
if (!defined('STDIN')) { if (!defined('STDIN') && session_status() === PHP_SESSION_NONE) {
header("X-Frame-Options: SAMEORIGIN"); header("X-Frame-Options: SAMEORIGIN");
header("Content-Security-Policy: frame-ancestors 'self';"); header("Content-Security-Policy: frame-ancestors 'self';");
header("X-Content-Type-Options: nosniff"); header("X-Content-Type-Options: nosniff");
@@ -99,7 +99,7 @@
//start the session if not using the command line //start the session if not using the command line
global $no_session; global $no_session;
if (!defined('STDIN') && empty($no_session)) { if (!defined('STDIN') && empty($no_session) && session_status() === PHP_SESSION_NONE) {
ini_set('session.cookie_httponly', !isset($conf['session.cookie_httponly']) ? 'true' : (!empty($config->get('session.cookie_httponly')) ? 'true' : 'false')); ini_set('session.cookie_httponly', !isset($conf['session.cookie_httponly']) ? 'true' : (!empty($config->get('session.cookie_httponly')) ? 'true' : 'false'));
ini_set('session.cookie_secure', !isset($conf['session.cookie_secure']) ? 'true' : (!empty($config->get('session.cookie_secure')) ? 'true' : 'false')); ini_set('session.cookie_secure', !isset($conf['session.cookie_secure']) ? 'true' : (!empty($config->get('session.cookie_secure')) ? 'true' : 'false'));
ini_set('session.cookie_samesite', $config->get('session.cookie_samesite', 'Lax')); ini_set('session.cookie_samesite', $config->get('session.cookie_samesite', 'Lax'));