Add session cookie httponly and set it to true.

This commit is contained in:
markjcrane
2015-12-21 20:52:54 -07:00
parent d6c03f19e9
commit b721572c56
10 changed files with 14 additions and 5 deletions

View File

@@ -233,6 +233,8 @@ echo "\n";
echo " <TABLE BORDER=0 cellpadding='0' cellspacing='0'><TR><TD><a href='javascript:void(0);' onclick=\"if (typeof(clipwin)!='undefined') { clipwin.close(); } clipwin = window.open('fileoptions.php?folder=".urlencode($_SERVER["DOCUMENT_ROOT"])."','null','left=20,top=20,width=310,height=300,toolbar=0,resizable=0');\" style='text-decoration:none;' title=''><IMG SRC=\"images/folder.gif\" border='0'> ".$text['label-files']." </a><DIV style=''>\n"; //display:none
//echo " <TABLE BORDER=0 cellpadding='0' cellspacing='0'><TR><TD><A onClick=\"Toggle(this)\"><IMG SRC=\"images/plus.gif\"> <IMG SRC=\"images/folder.gif\"> Files </A><DIV style=''>\n"; //display:none
//start the session
ini_set("session.cookie_httponly", True);
session_start();
if ($_SESSION["app"]["edit"]["dir"] == "scripts") {
echo recur_dir($_SESSION['switch']['scripts']['dir']);

View File

@@ -228,6 +228,7 @@ echo " <TABLE BORDER=0 cellpadding='0' cellspacing='0'><TR><TD><IMG SRC=\"i
//echo "</DIV></TD></TR></TABLE>\n";
//echo "</DIV></TD></TR></TABLE>\n";
ini_set("session.cookie_httponly", True);
session_start();
if ($_SESSION["app"]["edit"]["dir"] == "scripts") {
echo recur_dir($_SESSION['switch']['scripts']['dir']);