Improve security of sessions:

- use only cookies to store session id on client side
- use default php session system with database handler to store sessions on server side

git-svn-id: http://piwigo.org/svn/branches/branch-1_5@1003 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
nikrou
2006-01-15 12:52:55 +00:00
parent 6d45ca83ef
commit 9d6404ad36
42 changed files with 251 additions and 353 deletions
+3 -3
View File
@@ -228,7 +228,7 @@ $template->assign_vars(
'F_KEYWORD'=>@$_GET['keyword'],
'F_AUTHOR'=>@$_GET['author'],
'U_HOME' => add_session_id(PHPWG_ROOT_PATH.'category.php')
'U_HOME' => PHPWG_ROOT_PATH.'category.php'
)
);
@@ -465,7 +465,7 @@ SELECT id, uppercats
array(
'TITLE_IMG'=>$name,
'I_THUMB'=>$thumbnail_src,
'U_THUMB'=>add_session_id($url)
'U_THUMB'=>$url
));
$author = $comment['author'];
@@ -477,7 +477,7 @@ SELECT id, uppercats
$template->assign_block_vars(
'comment',
array(
'U_PICTURE' => add_session_id($url),
'U_PICTURE' => $url,
'TN_SRC' => $thumbnail_src,
'AUTHOR' => $author,
'DATE'=>format_date($comment['date'],'mysql_datetime',true),