diff options
author | nikrou <nikrou@piwigo.org> | 2006-01-15 12:52:55 +0000 |
---|---|---|
committer | nikrou <nikrou@piwigo.org> | 2006-01-15 12:52:55 +0000 |
commit | 9d6404ad36375079e815979bd4bf476a5195df5e (patch) | |
tree | 4e4724a9f86cdc91d31419ac5b2a2489b858a70b /search.php | |
parent | 6d45ca83efc0f28bb00ecab1a9b4964279cc26b5 (diff) |
Improve security of sessions:
- use only cookies to store session id on client side
- use default php session system with database handler to store sessions on server side
git-svn-id: http://piwigo.org/svn/branches/branch-1_5@1003 68402e56-0260-453c-a942-63ccdbb3a9ee
Diffstat (limited to '')
-rw-r--r-- | search.php | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/search.php b/search.php index 2778c8b80..b02b52daa 100644 --- a/search.php +++ b/search.php @@ -129,7 +129,6 @@ if (isset($_POST['submit'])) if (isset($_POST['submit']) and count($errors) == 0) { $url = 'category.php?cat=search&search='.$search_string; - $url = add_session_id($url, true); redirect($url); } //----------------------------------------------------- template initialization @@ -180,9 +179,9 @@ $template->assign_vars(array( 'TODAY_DAY' => date('d', time()), 'TODAY_MONTH' => date('m', time()), 'TODAY_YEAR' => date('Y', time()), - 'S_SEARCH_ACTION' => add_session_id( 'search.php' ), + 'S_SEARCH_ACTION' => 'search.php', 'U_HELP' => PHPWG_ROOT_PATH.'/popuphelp.php?page=search', - 'U_HOME' => add_session_id( 'category.php' ) + 'U_HOME' => 'category.php' ) ); |