Add session cookie httponly and set it to true.

This commit is contained in:
markjcrane
2015-12-21 20:52:54 -07:00
parent d6c03f19e9
commit b721572c56
10 changed files with 14 additions and 5 deletions

View File

@@ -82,7 +82,7 @@ if (count($_POST) > 0 && check_str($_POST["persistform"]) != "1") {
$msg = '';
//--- begin captcha verification ---------------------
//session_start(); //make sure sessions are started
//ini_set("session.cookie_httponly", True); //session_start(); //make sure sessions are started
if (strtolower($_SESSION["captcha"]) != strtolower($_REQUEST["captcha"]) || strlen($_SESSION["captcha"]) == 0) {
//$msg .= "Captcha Verification Failed<br>\n";
}