Support for HttpOnly cookies.
authorstekkel <stekkel@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Sat, 15 Oct 2005 16:44:59 +0000 (16:44 +0000)
committerstekkel <stekkel@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Sat, 15 Oct 2005 16:44:59 +0000 (16:44 +0000)
commit3a1de9f183d077483f2d89162a24b572cffba7a5
treef549b49d3445579b1958b1af01ed754bb7ca8edd
parent7b0ea8602d2a437280347c0f0a46a27540e2ffcc
Support for HttpOnly cookies.
HttpOnly cookies prohibit access by Javascript. Currently only IE6 supports
it. See http://msdn.microsoft.com/workshop/author/dhtml/httponly_cookies.asp
In order to achieve that the cookie with the session_id also contains the
httponly cookie attribute I introduced a new function, sqsession_start which
overwrites the cookie set by php by our own cookie containing the session_id
and the httponly attribute.
All session_start calls are replaced by sqsession_start.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@10174 7612ce4b-ef26-0410-bec9-ea0150e637f0
functions/global.php
src/redirect.php
src/right_main.php
src/search.php
src/webmail.php