29 lines
1.1 KiB
PHP
29 lines
1.1 KiB
PHP
<?php
|
|
// app/session.php
|
|
if (session_status() === PHP_SESSION_NONE) {
|
|
|
|
// Derive cookie path dynamically from the current script location.
|
|
// e.g. /tr3wms/app/login/api/engine/login_otp.php → /tr3wms/
|
|
// This relies on the app always living one level under the repo root:
|
|
// DOCUMENT_ROOT/
|
|
// tr3wms/ ← repo root (cookie path)
|
|
// app/
|
|
// session.php ← this file is always inside app/
|
|
$parts = explode('/', trim($_SERVER['SCRIPT_NAME'], '/'));
|
|
$repo_name = '/' . $parts[0] . '/'; // e.g. /tr3wms/
|
|
|
|
ini_set('session.use_strict_mode', 1);
|
|
ini_set('session.gc_maxlifetime', 3600);
|
|
ini_set('session.cookie_path', $repo_name);
|
|
ini_set('session.cookie_httponly', 1);
|
|
ini_set('session.cookie_samesite', 'Lax');
|
|
session_set_cookie_params([
|
|
'lifetime' => 0,
|
|
'path' => $repo_name,
|
|
'domain' => '',
|
|
'secure' => isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on',
|
|
'httponly' => true,
|
|
'samesite' => 'Lax',
|
|
]);
|
|
session_start();
|
|
} |