From 5c7de28ca61b00495fbf26c449bb5d5ed38d8669 Mon Sep 17 00:00:00 2001
From: Savetheinternet <savetheinternet@n0v4.com>
Date: Wed, 1 Dec 2010 16:42:48 +1100
Subject: JAIL_COOKIES config directive.

---
 inc/user.php | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

(limited to 'inc/user.php')

diff --git a/inc/user.php b/inc/user.php
index 1dad35f9..0b9af643 100644
--- a/inc/user.php
+++ b/inc/user.php
@@ -1,14 +1,21 @@
 <?php
 	
+	// Set the session name.
 	session_name(SESS_COOKIE);
-	session_start();
 	
+	// Set session parameters
+	session_set_cookie_params(0, JAIL_COOKIES?ROOT:'/');
+	
+	// Start the session
+	session_start(COOKIE_EXPIRE);
+	
+	// Session creation time
 	if(!isset($_SESSION['created'])) $_SESSION['created'] = time();
 	
 	if(!isset($_COOKIE[HASH_COOKIE]) || !isset($_COOKIE[TIME_COOKIE]) || $_COOKIE[HASH_COOKIE] != md5($_COOKIE[TIME_COOKIE].SALT)) {
 		$time = time();
-		setcookie(TIME_COOKIE, $time, time()+COOKIE_EXPIRE, '/', null, false, true);
-		setcookie(HASH_COOKIE, md5(time().SALT), time()+COOKIE_EXPIRE, '/', null, false, true);
+		setcookie(TIME_COOKIE, $time, time()+COOKIE_EXPIRE, JAIL_COOKIES?ROOT:'/', null, false, true);
+		setcookie(HASH_COOKIE, md5(time().SALT), time()+COOKIE_EXPIRE, JAIL_COOKIES?ROOT:'/', null, false, true);
 		$user = Array('valid' => false, 'appeared' => $time);
 	} else {
 		$user = Array('valid' => true, 'appeared' => $_COOKIE[TIME_COOKIE]);
-- 
cgit v1.3