login, cookies. set secure; HttpOnly on test_cookie as well to avoid false positives on pci scan

This commit is contained in:
Ad Schellevis 2017-07-16 11:55:47 +02:00
parent d2ab500ac6
commit 218b37df45

View File

@ -384,7 +384,7 @@ function display_login_form($Login_Error = '')
}
}
}
setcookie("cookie_test", time() + 3600);
setcookie("cookie_test", time() + 3600 , time() + 3600, '/', null, $config['system']['webgui']['protocol'] == "https", true);
$have_cookies = isset($_COOKIE["cookie_test"]);
?><!doctype html>