Enable secure session and cookies by default if installed or upgraded in an HTTPS site

This commit is contained in:
Kijin Sung 2026-02-26 01:25:36 +09:00
parent 7ce40653d7
commit d0d1505367
2 changed files with 9 additions and 0 deletions

View file

@ -204,6 +204,13 @@ class installController extends install
// Set the default umask.
$config['file']['umask'] = Rhymix\Framework\Storage::recommendUmask();
// Set default security settings.
if ($config['url']['ssl'] === 'always')
{
$config['session']['use_ssl'] = true;
$config['session']['use_ssl_cookies'] = true;
}
// Load the new configuration.
Rhymix\Framework\Config::setAll($config);
Context::loadDBInfo($config);