Skip to content

Commit c6393c8

Browse files
authored
Patch session fixation vuln
Here's the documentation for that function: http://php.net/manual/en/function.session-regenerate-id.php And here's about session fixation: https://www.owasp.org/index.php/Session_fixation
1 parent f014e38 commit c6393c8

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

web/login/index.php

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,9 @@
7979
else {
8080
$_SESSION['language'] = 'en';
8181
}
82-
82+
83+
// Regenerate session id to prevent session fixation
84+
session_regenerate_id();
8385

8486
// Redirect request to control panel interface
8587
if (!empty($_SESSION['request_uri'])) {

0 commit comments

Comments
 (0)