Setting Secure=true in concrete5 cookie
Permalink
New to the forum and Concrete5, so apologies if i'm in the wrong place.
I'n running a site version 5.6.3.3 on a full SSL server so i would like the CONCRETE5 cookie to have the secure flag set but I can't find where it's initilased in the code or a setting in the dashboard. Am i missing something obvious?
Thanks for any help given.
Andrew
I'n running a site version 5.6.3.3 on a full SSL server so i would like the CONCRETE5 cookie to have the secure flag set but I can't find where it's initilased in the code or a setting in the dashboard. Am i missing something obvious?
Thanks for any help given.
Andrew
Found what i was looking for in [your web dir]/concrete/startup/session.php
session_set_cookie_params
...
(defined('SESSION_COOKIE_PARAM_SECURE')?SESSION_COOKIE_PARAM_SECURE:true), <<<<<<<<<<<<<<<<<<<<<<<<<<<<
.....
Andrew