diff options
| author | robin <robin@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2008-09-18 11:54:14 +0000 |
|---|---|---|
| committer | robin <robin@208e9e7b-5314-0410-a742-e7e81cd9613c> | 2008-09-18 11:54:14 +0000 |
| commit | 3e84a7943be101168f43787baed08c8a589dda61 (patch) | |
| tree | dec26925d9d8ab22ed9e15175739a2b12d9ff6f4 /roundcubemail/program | |
| parent | 406e9a7e083af8d999c764af5026e02a7d0c08d3 (diff) | |
Bind cookie gotten over HTTPS to HTTPS only (#1485336).
git-svn-id: https://svn.roundcube.net/trunk@1823 208e9e7b-5314-0410-a742-e7e81cd9613c
Diffstat (limited to 'roundcubemail/program')
| -rw-r--r-- | roundcubemail/program/include/session.inc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/roundcubemail/program/include/session.inc b/roundcubemail/program/include/session.inc index 603f384bb..ad66f0c40 100644 --- a/roundcubemail/program/include/session.inc +++ b/roundcubemail/program/include/session.inc @@ -184,7 +184,8 @@ function rcube_sess_regenerate_id() $lifetime = $cookie['lifetime'] ? time() + $cookie['lifetime'] : 0; setcookie(session_name(), '', time() - 3600); - setcookie(session_name(), $random, $lifetime, $cookie['path'], $cookie['domain']); + setcookie(session_name(), $random, $lifetime, $cookie['path'], $cookie['domain'], + $_SERVER['HTTPS'] && ($_SERVER['HTTPS']!='off')); return true; } |