jan/miniflux-legacy
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Update PicoFarad (session creation improvements)

Browse Source
This commit is contained in:
Frédéric Guillot 2014-02-27 21:02:35 -05:00
parent b5c20b93e5
commit 9b80a375f5
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
vendor/PicoFarad/Session.php vendored
View File

@ -9,15 +9,33 @@ function open($base_path = '/', $save_path = '')
{ {
if ($save_path !== '') session_save_path($save_path); if ($save_path !== '') session_save_path($save_path);
// HttpOnly and secure flags for session cookie
session_set_cookie_params( session_set_cookie_params(
SESSION_LIFETIME, SESSION_LIFETIME,
$base_path, $base_path ?: '/',
null, null,
isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on', isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on',
true true
); );
// Avoid session id in the URL
ini_set('session.use_only_cookies', true);
// Ensure session ID integrity
ini_set('session.entropy_file', '/dev/urandom');
ini_set('session.entropy_length', '32');
ini_set('session.hash_bits_per_character', 6);
// Custom session name
session_name('__$');
session_start(); session_start();
// Regenerate the session id to avoid session fixation issue
if (empty($_SESSION['__validated'])) {
session_regenerate_id(true);
$_SESSION['__validated'] = 1;
}
} }