diff options
| author | nikrou <nikrou@piwigo.org> | 2006-01-15 12:52:55 +0000 |
|---|---|---|
| committer | nikrou <nikrou@piwigo.org> | 2006-01-15 12:52:55 +0000 |
| commit | 9d6404ad36375079e815979bd4bf476a5195df5e (patch) | |
| tree | 4e4724a9f86cdc91d31419ac5b2a2489b858a70b /comments.php | |
| parent | 6d45ca83efc0f28bb00ecab1a9b4964279cc26b5 (diff) | |
Improve security of sessions:
- use only cookies to store session id on client side
- use default php session system with database handler to store sessions on server side
git-svn-id: http://piwigo.org/svn/branches/branch-1_5@1003 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to 'comments.php')
| -rw-r--r-- | comments.php | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/comments.php b/comments.php index fa240aa29..5215ab473 100644 --- a/comments.php +++ b/comments.php @@ -228,7 +228,7 @@ $template->assign_vars( 'F_KEYWORD'=>@$_GET['keyword'], 'F_AUTHOR'=>@$_GET['author'], - 'U_HOME' => add_session_id(PHPWG_ROOT_PATH.'category.php') + 'U_HOME' => PHPWG_ROOT_PATH.'category.php' ) ); @@ -465,7 +465,7 @@ SELECT id, uppercats array( 'TITLE_IMG'=>$name, 'I_THUMB'=>$thumbnail_src, - 'U_THUMB'=>add_session_id($url) + 'U_THUMB'=>$url )); $author = $comment['author']; @@ -477,7 +477,7 @@ SELECT id, uppercats $template->assign_block_vars( 'comment', array( - 'U_PICTURE' => add_session_id($url), + 'U_PICTURE' => $url, 'TN_SRC' => $thumbnail_src, 'AUTHOR' => $author, 'DATE'=>format_date($comment['date'],'mysql_datetime',true), |