17 lines
560 B
PHP
17 lines
560 B
PHP
<?php
|
|
// app/session.php
|
|
if (session_status() === PHP_SESSION_NONE) {
|
|
// Reject client-supplied session IDs — prevents session fixation.
|
|
ini_set('session.use_strict_mode', 1);
|
|
// Server-side session file lifetime: 1 hour.
|
|
ini_set('session.gc_maxlifetime', 3600);
|
|
session_set_cookie_params([
|
|
'lifetime' => 0,
|
|
'path' => '/wms/',
|
|
'domain' => '',
|
|
'secure' => isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on',
|
|
'httponly' => true,
|
|
'samesite' => 'Lax',
|
|
]);
|
|
session_start();
|
|
} |