Changeset 1004 for trunk/profile.php

Timestamp:

Jan 15, 2006, 2:45:42 PM (18 years ago)

Author:

nikrou

Message:

Improve security of sessions:

• use only cookies to store session id on client side
• use default php session system with database handler to store sessions on server side

File:

• trunk/profile.php (modified) (2 diffs)

trunk/profile.php

@@ -137 +137 @@
     // redirection
     $url = PHPWG_ROOT_PATH.'category.php?'.$_SERVER['QUERY_STRING'];
-    redirect(add_session_id($url));
+    redirect($url);
   }
 }
@@ -199 +199 @@
     'L_RETURN_HINT' =>  $lang['home_hint'],
 
-    'U_RETURN' => add_session_id(PHPWG_ROOT_PATH.'category.php'),
-    
-    'F_ACTION'=>add_session_id($url_action),
+    'U_RETURN' => PHPWG_ROOT_PATH.'category.php',
+    
+    'F_ACTION'=>$url_action,
     ));