mirror of
https://github.com/fusionpbx/fusionpbx.git
synced 2025-12-30 00:53:50 +00:00
Security - Secure session cookies by setting HttpOnly, Secure, and SameSite attributes (#7530)
This commit is contained in:
@@ -88,10 +88,13 @@
|
||||
global $database;
|
||||
$database = database::new(['config' => $config]);
|
||||
|
||||
//if not using the command line required files
|
||||
//start the session if not using the command line
|
||||
global $no_session;
|
||||
if (!defined('STDIN') && empty($no_session)) {
|
||||
require_once __DIR__ . '/php.php';
|
||||
ini_set('session.cookie_httponly', 'true');
|
||||
ini_set('session.cookie_secure', 'true');
|
||||
ini_set('session.cookie_samesite', 'Lax');
|
||||
session_start();
|
||||
}
|
||||
|
||||
//load settings
|
||||
|
||||
Reference in New Issue
Block a user