Changeset 410

Timestamp:

Sep 27, 2012 6:24:06 PM (12 years ago)

Author:

anonymous

Message:

Added use of httponly for PHP session

File:

• trunk/lib/App.inc.php (modified) (1 diff)

trunk/lib/App.inc.php

@@ -325 +325 @@
             ini_set('session.entropy_file', '/dev/urandom');
             ini_set('session.entropy_length', '512');
+            ini_set('session.cookie_httponly', true);
             session_name($this->getParam('session_name'));