php - Cookies sent over HTTP instead of SSL -


i'm using ipb , run site on ssl (https) functional, have issue. cookies not have parameter "https only" / "secure", pretty essential in case ssl turns off, cookie cannot transfered on http (plain text). i've read article on how it, doesn't work way ipb. here's how it's set:

 line 4227:    @setcookie( $_name, $value, $expires, $_path, $_domain . '; httponly' );  line 4231:    @setcookie( $_name, $value, $expires, $_path );  line 4236:    @setcookie( $_name, $value, $expires, $_path, $_domain, null, true );  line 4241:    @setcookie( $_name, $value, $expires, $_path, $_domain ); 

img http://gyazo.com/bb00b575477dc6bbe42b1b6be9e1c96e.png

how can enforce "secure" parameter?

it's right in setcookie() documentation. set parameter #6 true:

@setcookie( $_name, $value, $expires, $_path, $_domain, true, true );                                                         ^-#6 secure                                                               ^-#7 httponly 

Comments

Popular posts from this blog

ios - UICollectionView Self Sizing Cells with Auto Layout -

node.js - ldapjs - write after end error -

DOM Manipulation in Wordpress (and elsewhere) using php -