aboutsummaryrefslogtreecommitdiffstats
path: root/profile.php
diff options
context:
space:
mode:
authornikrou <nikrou@piwigo.org>2006-01-15 13:45:42 +0000
committernikrou <nikrou@piwigo.org>2006-01-15 13:45:42 +0000
commitc3397a2c73273ba5414d976ab7f45ae5e71a8a33 (patch)
treee59456bdf40caf57ca5d3586190c3b3f6e8eb463 /profile.php
parentb223bb495dbfa1611766cdc528c9eb1af56c43e3 (diff)
Improve security of sessions:
- use only cookies to store session id on client side - use default php session system with database handler to store sessions on server side git-svn-id: http://piwigo.org/svn/trunk@1004 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to 'profile.php')
-rw-r--r--profile.php6
1 files changed, 3 insertions, 3 deletions
diff --git a/profile.php b/profile.php
index 2d5e0a2f7..a793aa2c4 100644
--- a/profile.php
+++ b/profile.php
@@ -136,7 +136,7 @@ SELECT '.$conf['user_fields']['password'].' AS password
// redirection
$url = PHPWG_ROOT_PATH.'category.php?'.$_SERVER['QUERY_STRING'];
- redirect(add_session_id($url));
+ redirect($url);
}
}
// +-----------------------------------------------------------------------+
@@ -198,9 +198,9 @@ $template->assign_vars(
'L_RETURN' => $lang['home'],
'L_RETURN_HINT' => $lang['home_hint'],
- 'U_RETURN' => add_session_id(PHPWG_ROOT_PATH.'category.php'),
+ 'U_RETURN' => PHPWG_ROOT_PATH.'category.php',
- 'F_ACTION'=>add_session_id($url_action),
+ 'F_ACTION'=>$url_action,
));
$blockname = 'template_option';