Secure the other cookie, too.

16 years ago · 72d25b1159
parent d0b973cf6a
commit 72d25b1159
1 changed files with 2 additions and 1 deletions
--- a/program/include/rcmail.php
+++ b/program/include/rcmail.php
@ -728,7 +728,8 @@ class rcmail
      if (!$valid || ($_SERVER['REQUEST_METHOD']!='POST' && $now - $_SESSION['auth_time'] > 300)) {
        $_SESSION['last_auth'] = $_SESSION['auth_time'];
        $_SESSION['auth_time'] = $now;
-        setcookie('sessauth', $this->get_auth_hash(session_id(), $now));
+        setcookie('sessauth', $this->get_auth_hash(session_id(), $now), '/',
+                  $_SERVER['HTTPS'] && ($_SERVER['HTTPS']!='off'));
      }
    }
    else {