Commit d84cf055 authored by dockx thibault's avatar dockx thibault
Browse files

Merge branch...

Merge branch '6219-security-cookie-session-is-not-renewed-or-set-after-authentification' into '1.3-fixes'

Resolve "[security] - Cookie session is not renewed or set after authentification"

See merge request fusiondirectory/fd!962
Showing with 4 additions and 0 deletions
+4 -0
...@@ -408,6 +408,10 @@ class Index { ...@@ -408,6 +408,10 @@ class Index {
if ($success) { if ($success) {
/* Everything went well, redirect to main.php */ /* Everything went well, redirect to main.php */
//Regenerate after login in order to avoid session fixation issues (vuln),
session_regenerate_id();
static::redirect(); static::redirect();
} }
} }
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment