Do not mangle with ini_set in loadSession, so bots won't get PHPSESSID in URLs

This commit is contained in:
Aleksei Miheev
2014-02-16 16:21:39 +00:00
parent f271e7a53d
commit 4c6046822b

View File

@@ -1166,12 +1166,6 @@ function loadSession()
{
global $modSettings;
// Attempt to change a few PHP settings.
@ini_set('session.use_cookies', true);
@ini_set('session.use_only_cookies', false);
@ini_set('url_rewriter.tags', '');
@ini_set('arg_separator.output', '&');
// It's already been started - there's really nothing we can do.
if (session_id() == '')
{