|
@@ -28,8 +28,8 @@ |
|
|
block discarded – undo |
|
28
|
28
|
'use_strict_mode' => '1', // enable to prevent session fixation |
|
29
|
29
|
'use_trans_sid' => '0', // disable to prevent session fixation and hijacking |
|
30
|
30
|
'use_only_cookies' => '1', // disable session identifiers in the URLs |
|
31
|
|
- 'cache_limiter' => '', // disable response headers |
|
32
|
|
- 'referer_check' => '', // disable it, not a safe implementation (with substr() check) |
|
|
31
|
+ 'cache_limiter' => '', // disable response headers |
|
|
32
|
+ 'referer_check' => '', // disable it, not a safe implementation (with substr() check) |
|
33
|
33
|
]); |
|
34
|
34
|
|
|
35
|
35
|
if ($this->get('expire_at_browser_close')) { |
Please login to merge, or discard this patch.