Merge pull request #379 from saschaszott/OPUSVIER-1443

OPUSVIER-1443
OPUS4 · Mar 24, 2022 · 118436d · 118436d
2 parents 49ea8a7 + 06a03ac
commit 118436d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/apacheconf/apache22.conf.template b/apacheconf/apache22.conf.template
@@ -50,7 +50,8 @@ Alias /OPUS_URL_BASE "/BASEDIR/public"
     php_flag short_open_tag on
 
     # Setting cookie options
-    php_value session.cookie_path    /OPUS_URL_BASE
+    php_value session.cookie_path     /OPUS_URL_BASE
+    php_value session.cookie_httponly on
 
     # On Debian/Ubuntu, prevent PHP from deleting the cookies
     #Enable for UBUNTU/DEBIAN:# php_value session.gc_probability 0

diff --git a/apacheconf/apache24.conf.template b/apacheconf/apache24.conf.template
@@ -48,7 +48,8 @@ Alias /OPUS_URL_BASE "/BASEDIR/public"
     php_flag short_open_tag on
 
     # Setting cookie options
-    php_value session.cookie_path    /OPUS_URL_BASE
+    php_value session.cookie_path     /OPUS_URL_BASE
+    php_value session.cookie_httponly on
 
     # On Debian/Ubuntu, prevent PHP from deleting the cookies
     #Enable for UBUNTU/DEBIAN:# php_value session.gc_probability 0