From 593681a4a96aee0f99d24b19aa23bef7eb294882 Mon Sep 17 00:00:00 2001 From: Lukas Reschke Date: Wed, 18 Feb 2015 15:18:27 +0100 Subject: [PATCH] Fix invalid `ini_set` directives Somehow they got messed up. Because PHP does automatic type juggling this has worked before as well however it's not guaranteed that this might work in the future as well. --- lib/base.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/base.php b/lib/base.php index cdc662c28d..0e5d0794ba 100644 --- a/lib/base.php +++ b/lib/base.php @@ -253,7 +253,7 @@ class OC { $header .= '; includeSubDomains'; } header($header); - ini_set('session.cookie_secure', 'on'); + ini_set('session.cookie_secure', true); if ($request->getServerProtocol() <> 'https' && !OC::$CLI) { $url = 'https://' . $request->getServerHost() . $request->getRequestUri(); @@ -405,7 +405,7 @@ class OC { public static function initSession() { // prevents javascript from accessing php session cookies - ini_set('session.cookie_httponly', '1;'); + ini_set('session.cookie_httponly', true); // set the cookie path to the ownCloud directory $cookie_path = OC::$WEBROOT ? : '/';