Commit 218b37df authored by Ad Schellevis's avatar Ad Schellevis

login, cookies. set secure; HttpOnly on test_cookie as well to avoid false positives on pci scan

parent d2ab500a
...@@ -384,7 +384,7 @@ function display_login_form($Login_Error = '') ...@@ -384,7 +384,7 @@ function display_login_form($Login_Error = '')
} }
} }
} }
setcookie("cookie_test", time() + 3600); setcookie("cookie_test", time() + 3600 , time() + 3600, '/', null, $config['system']['webgui']['protocol'] == "https", true);
$have_cookies = isset($_COOKIE["cookie_test"]); $have_cookies = isset($_COOKIE["cookie_test"]);
?><!doctype html> ?><!doctype html>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment