Improve security of sessions:

- use only cookies to store session id on client side
- use default php session system with database handler to store sessions on server side

git-svn-id: http://piwigo.org/svn/branches/branch-1_5@1003 68402e56-0260-453c-a942-63ccdbb3a9ee

1 files changed, 5 insertions, 6 deletions

diff --git a/include/category_calendar.inc.php b/include/category_calendar.inc.php
index a355a9339..fb2fffd09 100644
--- a/include/category_calendar.inc.php
+++ b/include/category_calendar.inc.php
@@ -67,7 +67,6 @@ foreach ($calendar_years as $calendar_year => $nb_picture_year)
   {
     $url = PHPWG_ROOT_PATH.'category.php?cat=calendar';
     $url.= '&year='.$calendar_year;
-    $url = add_session_id($url);
     $years_nav_bar.= ' <a href="'.$url.'">'.$calendar_year.'</a>';
   }
 }
@@ -124,7 +123,7 @@ SELECT DISTINCT(MONTH('.$conf['calendar_datefield'].')) AS month
       $url = PHPWG_ROOT_PATH.'category.php?cat=calendar&amp;month=';
       $url.= $page['calendar_year'].'.'.sprintf('%02s', $calendar_month);
       $months_nav_bar.= ' ';
-      $months_nav_bar.= '<a href="'.add_session_id($url).'">';
+      $months_nav_bar.= '<a href="'.$url.'">';
       $months_nav_bar.= $lang['month'][(int)$calendar_month];
       $months_nav_bar.= '</a>';
     }
@@ -248,7 +247,7 @@ SELECT file,tn_ext,'.$conf['calendar_datefield'].',path
         'IMAGE_ALT'=>$row['file'],
         'IMAGE_TITLE'=>$thumbnail_title,
           
-        'U_IMG_LINK'=>add_session_id($url_link)
+        'U_IMG_LINK'=>$url_link
        )
      );
 
@@ -308,7 +307,7 @@ SELECT file,tn_ext,'.$conf['calendar_datefield'].',path
         'IMAGE_ALT'=>$row['file'],
         'IMAGE_TITLE'=>$thumbnail_title,
           
-        'U_IMG_LINK'=>add_session_id($url_link)
+        'U_IMG_LINK'=>$url_link
        )
      );
 
@@ -362,7 +361,7 @@ SELECT file,tn_ext,'.$conf['calendar_datefield'].',path
         'IMAGE_ALT'=>$row['file'],
         'IMAGE_TITLE'=>$thumbnail_title,
           
-        'U_IMG_LINK'=>add_session_id($url_link)
+        'U_IMG_LINK'=>$url_link
          )
        );
 
@@ -436,7 +435,7 @@ SELECT file,tn_ext,'.$conf['calendar_datefield'].',path
         'IMAGE_ALT'=>$row['file'],
         'IMAGE_TITLE'=>$thumbnail_title,
           
-        'U_IMG_LINK'=>add_session_id($url_link)
+        'U_IMG_LINK'=>$url_link
          )
        );