Changeset 1824 in subversion


Ignore:
Timestamp:
Sep 18, 2008 8:05:15 AM (5 years ago)
Author:
robin
Message:

Secure the other cookie, too.

File:
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/roundcubemail/program/include/rcmail.php

    r1781 r1824  
    729729        $_SESSION['last_auth'] = $_SESSION['auth_time']; 
    730730        $_SESSION['auth_time'] = $now; 
    731         setcookie('sessauth', $this->get_auth_hash(session_id(), $now)); 
     731        setcookie('sessauth', $this->get_auth_hash(session_id(), $now), '/', 
     732                  $_SERVER['HTTPS'] && ($_SERVER['HTTPS']!='off')); 
    732733      } 
    733734    } 
Note: See TracChangeset for help on using the changeset viewer.