Do not mangle with ini_set in loadSession, so bots won't get PHPSESSID in URLs
This commit is contained in:
@@ -1166,12 +1166,6 @@ function loadSession()
|
||||
{
|
||||
global $modSettings;
|
||||
|
||||
// Attempt to change a few PHP settings.
|
||||
@ini_set('session.use_cookies', true);
|
||||
@ini_set('session.use_only_cookies', false);
|
||||
@ini_set('url_rewriter.tags', '');
|
||||
@ini_set('arg_separator.output', '&');
|
||||
|
||||
// It's already been started - there's really nothing we can do.
|
||||
if (session_id() == '')
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user