From c3397a2c73273ba5414d976ab7f45ae5e71a8a33 Mon Sep 17 00:00:00 2001 From: nikrou Date: Sun, 15 Jan 2006 13:45:42 +0000 Subject: Improve security of sessions: - use only cookies to store session id on client side - use default php session system with database handler to store sessions on server side git-svn-id: http://piwigo.org/svn/trunk@1004 68402e56-0260-453c-a942-63ccdbb3a9ee --- profile.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'profile.php') diff --git a/profile.php b/profile.php index 2d5e0a2f7..a793aa2c4 100644 --- a/profile.php +++ b/profile.php @@ -136,7 +136,7 @@ SELECT '.$conf['user_fields']['password'].' AS password // redirection $url = PHPWG_ROOT_PATH.'category.php?'.$_SERVER['QUERY_STRING']; - redirect(add_session_id($url)); + redirect($url); } } // +-----------------------------------------------------------------------+ @@ -198,9 +198,9 @@ $template->assign_vars( 'L_RETURN' => $lang['home'], 'L_RETURN_HINT' => $lang['home_hint'], - 'U_RETURN' => add_session_id(PHPWG_ROOT_PATH.'category.php'), + 'U_RETURN' => PHPWG_ROOT_PATH.'category.php', - 'F_ACTION'=>add_session_id($url_action), + 'F_ACTION'=>$url_action, )); $blockname = 'template_option'; -- cgit v1.2.3