deblan/pdnsmanager
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Added more protection against session theft

Browse source
This commit is contained in:
Lukas Metzger 2016-01-29 15:39:40 +01:00
commit 243e9b045f
3 changed files with 14 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
api/index.php
View file

@ -35,6 +35,11 @@ if (password_verify($input->password, $password)) {
$_SESSION['id'] = $id;
$_SESSION['type'] = $type;
$randomSecret = base64_encode(openssl_random_pseudo_bytes(32));
$_SESSION['secret'] = $randomSecret;
setcookie("authSecret", $randomSecret, 0, "/", "", false, true);
} else {
$retval['status'] = "fail";
}