Remove session keys, and always set httpOnly

This commit is contained in:
Kijin Sung 2023-07-22 19:53:51 +09:00
parent c53e0a93f5
commit 60a3edc994
2 changed files with 41 additions and 171 deletions

View file

@ -1032,7 +1032,7 @@ class ModuleHandler extends Handler
// Handle redirects.
if($oModule->getRedirectUrl())
{
if ($_SESSION['is_new_session'])
if (!empty($_SESSION['is_new_session']))
{
ob_end_clean();
echo sprintf('<html><head><meta charset="UTF-8" /><meta http-equiv="refresh" content="0; url=%s" /></head><body></body></html>', escape($oModule->getRedirectUrl()));