mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-08-07 01:03:31 +02:00
Improve security of sessions:
- use only cookies to store session id on client side - use default php session system with database handler to store sessions on server side git-svn-id: http://piwigo.org/svn/trunk@1004 68402e56-0260-453c-a942-63ccdbb3a9ee
This commit is contained in:
@@ -222,10 +222,8 @@ SELECT id,path,tn_ext,name,date_creation,comment,keywords,author,file
|
||||
!empty($row['name']) ?
|
||||
$row['name'] : get_name_from_file($row['file']),
|
||||
'U_EDIT' =>
|
||||
add_session_id(
|
||||
PHPWG_ROOT_PATH.'admin.php?page=picture_modify'.
|
||||
'&image_id='.$row['id']
|
||||
),
|
||||
'&image_id='.$row['id'],
|
||||
'ID' => $row['id'],
|
||||
'FILENAME' => $row['path'],
|
||||
'TN_SRC' => $src,
|
||||
|
||||
Reference in New Issue
Block a user