Skip to content

1.0.4

Choose a tag to compare

@carry0987 carry0987 released this 11 Jan 04:08
· 12 commits to master since this release
67c4625

Refactor session initialization and fixation methods

  • Ensure session_regenerate_id is called once by invoking preventSessionFixation only during session_start in initSession.
  • Check if the HTTPS key is set in the $_SERVER global to avoid undefined index notices when setting cookie parameters with secure flag.
  • Remove redundant calls to preventSessionFixation and preventSessionExpired in the constructor and renew methods.

These changes aim to streamline session handling, strengthen security measures against session fixation, and ensure compatibility with servers where HTTPS may not be set or inactive.