From 6716a24b6844ab2ec1ee7588f1cf024070c395ed Mon Sep 17 00:00:00 2001 From: Chen-Pang He Date: Thu, 5 Jun 2014 18:07:29 +0800 Subject: Send cookie only via HTTPS if a mod logs in via HTTPS, which is the case on this site --- inc/mod/pages.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'inc/mod/pages.php') diff --git a/inc/mod/pages.php b/inc/mod/pages.php index a247e35c..5cb98085 100644 --- a/inc/mod/pages.php +++ b/inc/mod/pages.php @@ -150,7 +150,7 @@ function mod_dashboard() { $latest = false; } - setcookie('update', serialize($latest), time() + $config['check_updates_time'], $config['cookies']['jail'] ? $config['cookies']['path'] : '/', null, false, true); + setcookie('update', serialize($latest), time() + $config['check_updates_time'], $config['cookies']['jail'] ? $config['cookies']['path'] : '/', null, $_SERVER['HTTPS'], true); } if ($latest) -- cgit v1.3