Cookies changed to HttpOnly.

opencart · Apr 6, 2014 · 53c376a · 53c376a
1 parent 72dd3f8
commit 53c376a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/upload/php.ini b/upload/php.ini
@@ -6,8 +6,9 @@ max_execution_time = 36000;
 upload_max_filesize = 999M;
 safe_mode = Off;
 mysql.connect_timeout = 20;
-session.use_cookies = On;
+session.use_only_cookies = On;
 session.use_trans_sid = Off;
+session.cookie_httponly = On;
 session.gc_maxlifetime = 172800;
 allow_url_fopen = on;
 ;display_errors = 1;

diff --git a/upload/system/library/session.php b/upload/system/library/session.php
@@ -4,8 +4,9 @@ class Session {
 
 	public function __construct() {
 		if (!session_id()) {
-			ini_set('session.use_cookies', 'On');
+			ini_set('session.use_only_cookies', 'On');
 			ini_set('session.use_trans_sid', 'Off');
+			ini_set('session.cookie_httponly', 'On');
 
 			session_set_cookie_params(0, '/');
 			session_start();