summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authoralecpl <alec@alec.pl>2008-12-05 08:07:17 +0000
committeralecpl <alec@alec.pl>2008-12-05 08:07:17 +0000
commitd5fca0c4902d0c9a7427e6028ddbbc8bb337859e (patch)
treed63973b853b3ba4fb2531cf08933e0293c98a3fc
parent35521588351b35dddaf003b52e9eef9737f17c5e (diff)
#1485461: secure initial login form sesssion cookie
-rwxr-xr-xprogram/include/iniset.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/program/include/iniset.php b/program/include/iniset.php
index 2be15b1a5..fda13e9cf 100755
--- a/program/include/iniset.php
+++ b/program/include/iniset.php
@@ -53,6 +53,7 @@ if (set_include_path($include_path) === false) {
ini_set('session.name', 'roundcube_sessid');
ini_set('session.use_cookies', 1);
ini_set('session.only_use_cookies', 1);
+ini_set('session.cookie_secure', ($_SERVER['HTTPS'] && ($_SERVER['HTTPS'] != 'off')));
ini_set('error_reporting', E_ALL&~E_NOTICE);
set_magic_quotes_runtime(0);