nobody
|
5d3a1acecd
|
set samesite cookie flag to None
|
2022-01-10 11:38:21 -08:00 |
|
nobody
|
d46dd6aeb8
|
psr12 rewrites, continued
|
2021-12-03 14:01:39 +11:00 |
|
nobody
|
389b2e5b17
|
initial psr12 conversion
|
2021-12-03 09:33:36 +11:00 |
|
nobody
|
9966592f7b
|
extend default session length for unauthenticated access to 30 minutes.
|
2021-08-31 00:48:28 -07:00 |
|
zotlabs
|
d8ce899bb9
|
cleanup
|
2019-07-25 17:12:48 -07:00 |
|
zotlabs
|
1c3d26fe83
|
remove unused zot6 'request' verb support
|
2019-01-26 12:30:18 -08:00 |
|
redmatrix
|
ada26dd2cb
|
This explains it all. Don't set the domain when creating a cookie. You'll get a wildcard and sessions will break if you have multiple domains running hubzilla (or any php basic session based code).
|
2016-05-18 21:00:31 -07:00 |
|
redmatrix
|
f4b31dcb3a
|
Document what I know about the session regeneration issue. I'm really tired of fighting this darn thing. Sessions and cookies need to work.
|
2016-05-18 20:36:03 -07:00 |
|
redmatrix
|
c17b47518d
|
comment out session_regenerate until we get this sorted
|
2016-05-18 17:55:22 -07:00 |
|
redmatrix
|
1f7e6cae82
|
Revert "Revert "yet more session work""
This reverts commit 37d14f3a1d.
|
2016-05-18 17:03:54 -07:00 |
|
redmatrix
|
37d14f3a1d
|
Revert "yet more session work"
This reverts commit 51edd472c2.
|
2016-05-18 17:02:46 -07:00 |
|
redmatrix
|
51edd472c2
|
yet more session work
|
2016-05-16 22:01:33 -07:00 |
|
redmatrix
|
883b1ff513
|
an issue related to #386
|
2016-05-16 19:23:42 -07:00 |
|
redmatrix
|
2dcedd6951
|
more work on sessions and cookies, as some anomalies appeared in caldav and firefox which suggested deeper issues
|
2016-05-16 17:07:39 -07:00 |
|
redmatrix
|
18a9831cd3
|
restrict static to the one function that requires it
|
2016-05-16 13:46:35 -07:00 |
|
redmatrix
|
605c05fc8b
|
changes to session for cdev compatibility
|
2016-05-16 02:03:15 -07:00 |
|
redmatrix
|
0c5434d5e3
|
try again with shutdown handler, fix issue #373 (live-pubstream div wasn't present
|
2016-05-10 01:30:22 -07:00 |
|
redmatrix
|
91cc365143
|
reverse the logic of the jsenabled setting so that sessions without js are performance penalised instead of regular sessions.
|
2016-04-12 22:55:26 -07:00 |
|
redmatrix
|
be654f1769
|
Important work on the sessionhandler to maintain compatibility with php7 and php5x (x > 4)
Merge branch 'master' into dev
|
2016-04-12 19:40:19 -07:00 |
|
redmatrix
|
202035fc68
|
move all DB session storage logic to SessionHandler where it belongs
|
2016-04-11 19:19:58 -07:00 |
|
Mario Vavti
|
482962648f
|
whitespace
|
2016-04-11 11:01:53 +02:00 |
|
redmatrix
|
d1a2aecfa0
|
move more session related stuff such as paranoia handling (IP address changes) into the session object and extend remember_me cookies once a day so that they will never expire (theoretically). The DB session driver will extend its expiration on every session write (in the case of persistent sessions).
|
2016-04-10 19:20:41 -07:00 |
|
redmatrix
|
abfbe9c937
|
a few issues: block public not blocking mod_cal, typo in sql for one clone file sync operation, fix_system_urls not catching cached contact photos, extend sessionhandler expiration when remember_me is enabled as the stored session is expiring long before the browser session.
|
2016-04-10 16:56:08 -07:00 |
|
redmatrix
|
c0bdcfedeb
|
log if the session handler fails and surface the ssl_cookie config setting
|
2016-04-08 05:10:36 -07:00 |
|
redmatrix
|
9b66b5eee3
|
objectify all the session management stuff
|
2016-04-08 04:44:10 -07:00 |
|