diff options
| author | ctrlcctrlv <wizardchan@hush.com> | 2013-08-18 16:27:14 +0000 |
|---|---|---|
| committer | ctrlcctrlv <wizardchan@hush.com> | 2013-08-18 16:27:14 +0000 |
| commit | 515e3f99f09a41aa0b7a0854ac81f895e9a72d0f (patch) | |
| tree | 53e93c44c7375757d72f4d28f8a647afa68c8260 /inc | |
| parent | 80ade5da1fbe903763699ac705387b4952d5eb53 (diff) | |
| parent | f6c25382b9708eff88a575ba199a645fc3dac420 (diff) | |
Merge branch 'master' of https://github.com/ctrlcctrlv/Tinyboard
Diffstat (limited to 'inc')
| -rw-r--r-- | inc/config.php | 3 | ||||
| -rw-r--r-- | inc/mod/auth.php | 2 |
2 files changed, 4 insertions, 1 deletions
diff --git a/inc/config.php b/inc/config.php index e9e52aaf..ae3ce0c0 100644 --- a/inc/config.php +++ b/inc/config.php @@ -154,6 +154,9 @@ // Make this something long and random for security. $config['cookies']['salt'] = 'abcdefghijklmnopqrstuvwxyz09123456789!@#$%^&*()'; + // Whether or not you can access the mod cookie in JavaScript. Most users should not need to change this. + $config['cookies']['httponly'] = true; + // Used to salt secure tripcodes ("##trip") and poster IDs (if enabled). $config['secure_trip_salt'] = ')(*&^%$#@!98765432190zyxwvutsrqponmlkjihgfedcba'; diff --git a/inc/mod/auth.php b/inc/mod/auth.php index bfab0f7e..0733646f 100644 --- a/inc/mod/auth.php +++ b/inc/mod/auth.php @@ -72,7 +72,7 @@ function setCookies() { $mod['hash'][0] . // password ':' . $mod['hash'][1], // salt - time() + $config['cookies']['expire'], $config['cookies']['jail'] ? $config['cookies']['path'] : '/', null, false, true); + time() + $config['cookies']['expire'], $config['cookies']['jail'] ? $config['cookies']['path'] : '/', null, false, $config['cookies']['httponly']); } function destroyCookies() { |