[Svn] r2123 - trunk/roundcubemail/program/include

trac at roundcube.net trac at roundcube.net
Fri Dec 5 09:07:19 CET 2008


Author: alec
Date: 2008-12-05 02:07:17 -0600 (Fri, 05 Dec 2008)
New Revision: 2123

Modified:
   trunk/roundcubemail/program/include/iniset.php
Log:
#1485461: secure initial login form sesssion cookie


Modified: trunk/roundcubemail/program/include/iniset.php
===================================================================
--- trunk/roundcubemail/program/include/iniset.php	2008-12-05 07:47:37 UTC (rev 2122)
+++ trunk/roundcubemail/program/include/iniset.php	2008-12-05 08:07:17 UTC (rev 2123)
@@ -53,6 +53,7 @@
 ini_set('session.name', 'roundcube_sessid');
 ini_set('session.use_cookies', 1);
 ini_set('session.only_use_cookies', 1);
+ini_set('session.cookie_secure', ($_SERVER['HTTPS'] && ($_SERVER['HTTPS'] != 'off')));
 ini_set('error_reporting', E_ALL&~E_NOTICE);
 set_magic_quotes_runtime(0);
 

_______________________________________________
http://lists.roundcube.net/mailman/listinfo/svn



More information about the Svn mailing list