aboutsummaryrefslogtreecommitdiffstats
path: root/comments.php
diff options
context:
space:
mode:
authornikrou <nikrou@piwigo.org>2006-01-15 13:45:42 +0000
committernikrou <nikrou@piwigo.org>2006-01-15 13:45:42 +0000
commitc3397a2c73273ba5414d976ab7f45ae5e71a8a33 (patch)
treee59456bdf40caf57ca5d3586190c3b3f6e8eb463 /comments.php
parentb223bb495dbfa1611766cdc528c9eb1af56c43e3 (diff)
Improve security of sessions:
- use only cookies to store session id on client side - use default php session system with database handler to store sessions on server side git-svn-id: http://piwigo.org/svn/trunk@1004 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to '')
-rw-r--r--comments.php6
1 files changed, 3 insertions, 3 deletions
diff --git a/comments.php b/comments.php
index 2a980416d..f82fa6423 100644
--- a/comments.php
+++ b/comments.php
@@ -179,7 +179,7 @@ $template->assign_vars(
'F_KEYWORD'=>@$_GET['keyword'],
'F_AUTHOR'=>@$_GET['author'],
- 'U_HOME' => add_session_id(PHPWG_ROOT_PATH.'category.php')
+ 'U_HOME' => PHPWG_ROOT_PATH.'category.php'
)
);
@@ -414,7 +414,7 @@ SELECT id, uppercats
array(
'TITLE_IMG'=>$name,
'I_THUMB'=>$thumbnail_src,
- 'U_THUMB'=>add_session_id($url)
+ 'U_THUMB'=>$url
));
$author = $comment['author'];
@@ -426,7 +426,7 @@ SELECT id, uppercats
$template->assign_block_vars(
'comment',
array(
- 'U_PICTURE' => add_session_id($url),
+ 'U_PICTURE' => $url,
'TN_SRC' => $thumbnail_src,
'AUTHOR' => $author,
'DATE'=>format_date($comment['date'],'mysql_datetime',true),