nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2025-12-30 00:53:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add session cookie httponly and set it to true.

Browse Source
This commit is contained in:
markjcrane
2015-12-21 20:52:54 -07:00
parent e2feca300a
commit 5da1286329
10 changed files with 14 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
resources/php.php
View File

@@ -29,6 +29,7 @@
//session handling
//start the session
ini_set("session.cookie_httponly", True);
session_start();
//regenerate sessions to avoid session id attacks such as session fixation
if ($_SESSION['security']['session_rotate']['boolean'] == "true") {