login, cookies. set secure; HttpOnly on test_cookie as well to avoid false positives on pci scan

(cherry picked from commit 218b37df)

login, cookies. set secure; HttpOnly on test_cookie as well to avoid false positives on pci scan
(cherry picked from commit 218b37df)
32a0191f · Ad Schellevis · Franco Fichtner · b8e302f1 · 32a0191f
Commit 32a0191f authored Jul 16, 2017 by Ad Schellevis Committed by Franco Fichtner Jul 16, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

authgui.inc src/etc/inc/authgui.inc +1 -1

No files found.
--- a/src/etc/inc/authgui.inc
+++ b/src/etc/inc/authgui.inc
@@ -384,7 +384,7 @@ function display_login_form($Login_Error = '')
            }
        }
    }
-    setcookie("cookie_test", time() + 3600);
+    setcookie("cookie_test", time() + 3600 ,  time() + 3600, '/', null, $config['system']['webgui']['protocol'] == "https", true);
    $have_cookies = isset($_COOKIE["cookie_test"]);

 ?><!doctype html>