From: Craig Andrews <candrews@integralblue.com>
Date: Tue, 26 Oct 2010 21:55:09 +0000 (-0400)
Subject: Set cookies with "secure" flag on SSL sites. Improves security.
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=22a0cf6251cff6bc3c872d27ee5a6921665c7394;p=quix0rs-gnu-social.git

Set cookies with "secure" flag on SSL sites. Improves security.
---

diff --git a/lib/util.php b/lib/util.php
index 6044fdd92e..d50fa20814 100644
--- a/lib/util.php
+++ b/lib/util.php
@@ -326,7 +326,8 @@ function common_set_cookie($key, $value, $expiration=0)
                      $value,
                      $expiration,
                      $cookiepath,
-                     $server);
+                     $server,
+                     common_config('site', 'ssl')=='always');
 }
 
 define('REMEMBERME', 'rememberme');