Delete conflicting wildcard cookies from subdomain

This commit is contained in:
Kijin Sung 2017-02-17 19:44:01 +09:00
parent 780034d4ee
commit 50410ec482

View file

@ -1061,7 +1061,7 @@ class Session
}
else
{
setcookie('rx_sesskey1', 'deleted', time() - 86400, $path, $domain, false, true);
setcookie('rx_sesskey1', 'deleted', time() - 86400, $path);
unset($_COOKIE['rx_sesskey1']);
}
@ -1072,6 +1072,16 @@ class Session
$_COOKIE['rx_sesskey2'] = $_SESSION['RHYMIX']['keys'][$domain]['key2'];
}
// Delete conflicting wildcard keys.
if (!strncmp($domain, 'www.', 4) && !Config::get('session.domain') && !ini_get('session.cookie_domain'))
{
$domain = preg_replace('/^www\./', '', $domain);
setcookie(session_name(), 'deleted', time() - 86400, $path, $domain);
setcookie('rx_autologin', 'deleted', time() - 86400, $path, $domain);
setcookie('rx_sesskey1', 'deleted', time() - 86400, $path, $domain);
setcookie('rx_sesskey2', 'deleted', time() - 86400, $path, $domain);
}
return true;
}