Changeset d0b973cf in github

Timestamp:

Sep 18, 2008 7:54:14 AM (5 years ago)

Author:

svncommit <devs@…>

Branches:

master, HEAD, courier-fix, dev-browser-capabilities, pdo, release-0.6, release-0.7, release-0.8

Children:

72d25b1

Parents:

cc0d55c

Message:

Bind cookie gotten over HTTPS to HTTPS only (#1485336).

File:

• program/include/session.inc (modified) (1 diff)

program/include/session.inc

@@ -185 +185 @@
 
   setcookie(session_name(), '', time() - 3600);
-  setcookie(session_name(), $random, $lifetime, $cookie['path'], $cookie['domain']);
+  setcookie(session_name(), $random, $lifetime, $cookie['path'], $cookie['domain'],
+            $_SERVER['HTTPS'] && ($_SERVER['HTTPS']!='off'));
 
   return true;