php - Cookies sent over HTTP instead of SSL -
i'm using ipb , run site on ssl (https) functional, have issue. cookies not have parameter "https only" / "secure", pretty essential in case ssl turns off, cookie cannot transfered on http (plain text). i've read article on how it, doesn't work way ipb. here's how it's set:
line 4227: @setcookie( $_name, $value, $expires, $_path, $_domain . '; httponly' ); line 4231: @setcookie( $_name, $value, $expires, $_path ); line 4236: @setcookie( $_name, $value, $expires, $_path, $_domain, null, true ); line 4241: @setcookie( $_name, $value, $expires, $_path, $_domain );
img http://gyazo.com/bb00b575477dc6bbe42b1b6be9e1c96e.png
how can enforce "secure" parameter?
it's right in setcookie() documentation. set parameter #6 true
:
@setcookie( $_name, $value, $expires, $_path, $_domain, true, true ); ^-#6 secure ^-#7 httponly
Comments
Post a Comment