aboutsummaryrefslogtreecommitdiffstats
path: root/files
diff options
context:
space:
mode:
authorFlorian Pritz <bluewind@xinu.at>2011-09-23 13:52:10 +0200
committerFlorian Pritz <bluewind@xinu.at>2011-09-24 18:42:00 +0200
commitc7d4e723417f3fad2a306af1f2053cdafde8af43 (patch)
treed696d25bf2a72e4ab03c378c65020220033407c1 /files
parent037d0e9640e93e2df28963b7383562572ccbdd10 (diff)
downloadnextcloud-server-c7d4e723417f3fad2a306af1f2053cdafde8af43.tar.gz
nextcloud-server-c7d4e723417f3fad2a306af1f2053cdafde8af43.zip
set cookie secure if forcessl is enabled
This also moves session_start in lib/base.php down a bit because we need OC::$SERVERROOT to get the config settings. Signed-off-by: Florian Pritz <bluewind@xinu.at>
Diffstat (limited to 'files')
-rw-r--r--files/ajax/timezone.php4
1 files changed, 3 insertions, 1 deletions
diff --git a/files/ajax/timezone.php b/files/ajax/timezone.php
index 93d06611a0d..8e1d2aa1ec1 100644
--- a/files/ajax/timezone.php
+++ b/files/ajax/timezone.php
@@ -1,4 +1,6 @@
<?php
+ // FIXME: this should start a secure session if forcessl is enabled
+ // see lib/base.php for an example
session_start();
$_SESSION['timezone'] = $_GET['time'];
-?> \ No newline at end of file
+?>