Set cookies with "secure" flag on SSL sites. Improves security.

2010-10-26 17:55:09 -04:00
parent b3cd558fe7
commit 22a0cf6251
1 changed files with 2 additions and 1 deletions
--- a/lib/util.php
+++ b/lib/util.php
@@ -326,7 +326,8 @@ function common_set_cookie($key, $value, $expiration=0)
                     $value,
                     $expiration,
                     $cookiepath,
-                     $server);
+                     $server,
+                     common_config('site', 'ssl')=='always');
 }

 define('REMEMBERME', 'rememberme');