cvs: php-master-web /include login.inc
| From: | Hannes Magnusson | Date: | Fri, 22 May 2009 10:25:09 +0000 |
| Subject: | cvs: php-master-web /include login.inc | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-4837@lists.php.net to get a copy of this message | ||
bjori Fri May 22 10:25:09 2009 UTC
Modified files:
/php-master-web/include login.inc
Log:
Make the magic cookie HTTP only
http://cvs.php.net/viewvc.cgi/php-master-web/include/login.inc?r1=1.9&r2=1.10&diff_format=u
Index: php-master-web/include/login.inc
diff -u php-master-web/include/login.inc:1.9 php-master-web/include/login.inc:1.10
--- php-master-web/include/login.inc:1.9 Wed Mar 4 17:31:53 2009
+++ php-master-web/include/login.inc Fri May 22 10:25:09 2009
@@ -1,8 +1,8 @@
<?php
-/* $Id: login.inc,v 1.9 2009/03/04 17:31:53 didou Exp $ */
+/* $Id: login.inc,v 1.10 2009/05/22 10:25:09 bjori Exp $ */
-include_once 'cvs-auth.inc';
-include_once 'functions.inc';
+require 'cvs-auth.inc';
+require 'functions.inc';
// User not logged in
$user = $pw = FALSE;
@@ -14,7 +14,9 @@
base64_encode("{$_POST['user']}:{$_POST['pw']}"),
time()+3600*24*12,
'/',
- '.php.net'
+ '.php.net',
+ false, // Secure
+ true // HTTP Only
);
list($user, $pw) = array($_POST['user'], $_POST['pw']);
}