Encrypt fixes, add carnum options, remove debug lines
This commit is contained in:
parent
1ead81a2b4
commit
a26c15752e
@ -7,3 +7,6 @@ Header append X-Content-Type-Options "nosniff"
|
||||
Header always set Strict-Transport-Security "max-age=604800; includeSubDomains"
|
||||
Header set X-Content-Type-Options nosniff
|
||||
</IfModule>
|
||||
<If "%{HTTP_USER_AGENT} !~ /(iPhone; CPU iPhone OS 1[0-2]|iPad; CPU OS 1[0-2]|iPod touch; CPU iPhone OS 1[0-2]|Macintosh; Intel Mac OS X.*Version\x2F1[0-2].*Safari|Macintosh;.*Mac OS X 10_14.* AppleWebKit.*Version\x2F1[0-3].*Safari)/i">
|
||||
Header edit Set-Cookie ^(.*)$ $1;SameSite=Strict
|
||||
</If>
|
||||
|
@ -15,17 +15,7 @@
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
*/
|
||||
ini_set('session.gc_maxlifetime', 24*60*60); // MIN SESSION
|
||||
ini_set('session.gc_probability', 1); // GC RATES
|
||||
ini_set('session.gc_divisor', 100); // TIMES
|
||||
ini_set('session.use_cookies', '1');
|
||||
ini_set('session.use_only_cookies', '1');
|
||||
ini_set('session.cookie_lifetime', '0');
|
||||
ini_set('session.cookie_secure', '0');
|
||||
ini_set('session.cookie_httponly', '1');
|
||||
ini_set('session.cookie_samesite', 'Strict');
|
||||
session_save_path('.tmp'); // TEMP
|
||||
session_start(); // START
|
||||
|
||||
require_once __DIR__ . '/autoload.php'; // AUTOLOAD
|
||||
use App\LobbySIO\Misc\Csrf; // ANTICSRF
|
||||
use App\LobbySIO\Config\Registry;
|
||||
|
@ -15,6 +15,7 @@
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
*/
|
||||
// START
|
||||
|
||||
//ini_set('session.gc_maxlifetime', 24*60*60); // MIN SESSION
|
||||
//ini_set('session.gc_probability', 1); // GC RATES
|
||||
|
Loading…
Reference in New Issue
Block a user