Tickets :: Comment on [#13284] Horde_Secret: Only store key in cookies if cookies are in use

* Your Email Address
* Spam protection	Enter the letters below: ..__.. ..__.. . \|\| \|\|__\|\| \|\| \| \__\|\|__\\| \|\|__\\|/\\|
Comment	> Hi, > > Horde_Secret currently stores the generated key in a cookie even when > cookies are not used for the session id. This happens in setKey() and > getKey(). > > The problem is later on in clearKey(): That one removes the key > cookie only if session cookies are in use, too. > > The attached patch fixes clearKey() and also avoids setting the > cookie at all for non-cookie sessions. > > Cheers, > Thomas >
Attachment
Watch this ticket