Do not mangle with ini_set in loadSession, so bots won't get PHPSESSID in URLs

This commit is contained in:
Aleksei Miheev
2014-02-16 16:21:39 +00:00
parent a0b8cc6fa0
commit 6487d3e04c

View File

@@ -1166,12 +1166,6 @@ function loadSession()
{
global $modSettings;
// Attempt to change a few PHP settings.
@ini_set('session.use_cookies', true);
@ini_set('session.use_only_cookies', false);
@ini_set('url_rewriter.tags', '');
@ini_set('arg_separator.output', '&');
// It's already been started - there's really nothing we can do.
if (session_id() == '')
{