diff --git a/html/index.php b/html/index.php index 304e73cedb42601377f7cea109e1e3e78a14defa..a72e361f969be7e80fe13d3c8b4397fa47e06900 100644 --- a/html/index.php +++ b/html/index.php @@ -408,6 +408,10 @@ class Index { if ($success) { /* Everything went well, redirect to main.php */ + + //Regenerate after login in order to avoid session fixation issues (vuln), + session_regenerate_id(); + static::redirect(); } }