Tickets :: Comment on [#13284] Horde_Secret: Only store key in cookies if cookies are in use

Search Results: 20 of 151 [ <<First <Prev Next> Last>> ] [ Return to Search Results ]

* Your Email Address
* Spam protection	Enter the letters below: . ..___.. ..___. . \| \| \| \| \|[__ \| \| \|__\| \| \|/\\|\| \|__\|
Comment	> Hi, > > Horde_Secret currently stores the generated key in a cookie even when > cookies are not used for the session id. This happens in setKey() and > getKey(). > > The problem is later on in clearKey(): That one removes the key > cookie only if session cookies are in use, too. > > The attached patch fixes clearKey() and also avoids setting the > cookie at all for non-cookie sessions. > > Cheers, > Thomas >
Attachment
Watch this ticket