From 2925001dcb0bab5fff7946bae1c3d8926398cf5c Mon Sep 17 00:00:00 2001 From: Frederic Guillot Date: Mon, 25 Mar 2013 21:29:30 -0400 Subject: [PATCH] Session cookies have the parameter "secure" when the connection is HTTPS --- miniflux/vendor/PicoFarad/Session.php | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/miniflux/vendor/PicoFarad/Session.php b/miniflux/vendor/PicoFarad/Session.php index d21d493..77543a2 100644 --- a/miniflux/vendor/PicoFarad/Session.php +++ b/miniflux/vendor/PicoFarad/Session.php @@ -7,7 +7,14 @@ const SESSION_LIFETIME = 2678400; function open($base_path = '/') { - session_set_cookie_params(SESSION_LIFETIME, $base_path, null, false, true); + session_set_cookie_params( + SESSION_LIFETIME, + $base_path, + null, + isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on', + true + ); + session_start(); }