summaryrefslogtreecommitdiffstats
path: root/system/core
diff options
context:
space:
mode:
authorRobin Sowell <robin.sowell@ellislab.com>2011-02-11 21:31:27 +0100
committerRobin Sowell <robin.sowell@ellislab.com>2011-02-11 21:31:27 +0100
commitd6d9f454b6939d1e6f1c9687f4e08d89690f79ff (patch)
tree2fdd83293d5bf27308475b44e7d36c652175b1e0 /system/core
parenta3e6224d8eeddce7b86c8fe122e84c91a570d882 (diff)
Adding config option to require 'secure' setting for all cookies- requires https.
Diffstat (limited to 'system/core')
-rw-r--r--system/core/Input.php4
1 files changed, 3 insertions, 1 deletions
diff --git a/system/core/Input.php b/system/core/Input.php
index 1157601e1..c2db94d64 100644
--- a/system/core/Input.php
+++ b/system/core/Input.php
@@ -225,8 +225,10 @@ class CI_Input {
$expire = 0;
}
}
+
+ $secure_cookie = (config_item('cookie_secure') === TRUE) ? 1 : 0;
- setcookie($prefix.$name, $value, $expire, $path, $domain, 0);
+ setcookie($prefix.$name, $value, $expire, $path, $domain, $secure_cookie);
}
// --------------------------------------------------------------------