Fixed issue: [security] If SSL is used cookies did not have secure flag

LimeSurvey · Aug 29, 2016 · ebd86f2 · ebd86f2 · Shnoulle · Nov 10, 2016
1 parent 6268ab1
commit ebd86f2
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/application/config/internal.php b/application/config/internal.php
@@ -146,6 +146,7 @@
         'session' => array(
             'cookieParams' => array(
                 'httponly' => true,
+                'secure'=> isset($_SERVER['HTTPS']) && ((!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') || $_SERVER['SERVER_PORT'] == 443)
             ),
         ),
         'messages' => array(