Changeset 690 for trunk/lib/Auth_File.inc.php

Timestamp:

May 30, 2019 5:28:57 AM (5 years ago)

Author:

anonymous

Message:

Remove App's 'ssl_domain' and 'ssl_enabled' parameters; determine SSL usage by detecting the presence of HTTPS env var (or HTTP_X_FORWARDED_PROTO). Update Session parameters for greater logevity and security. Add 'session_dir' to store site-specific sess_* files with a longer gc_maxlifetime duration.

File:

• trunk/lib/Auth_File.inc.php (modified) (1 diff)

trunk/lib/Auth_File.inc.php

@@ -324 +324 @@
 
             // Login scripts must have the same 'login' tag for boomerangURL verification/manipulation.
-            $app->setBoomerangURL(absoluteMe(), 'login');
+            $app->setBoomerangURL(getenv('REQUEST_URI'), 'login');
             $app->dieURL($this->_params['login_url']);
         }