Fixed: FS#3854 - Missing secure and httponly attribute on PHP session cookie

Till Brehm

2015-04-01 97f28b1115ccfdcbdab8e8709ba706c5aefe5a1c

 interface/lib/classes/getconf.inc.php

@@ -63,10 +63,10 @@
      if(is_array($this->security_config)) {
         return ($section == '') ? $this->security_config : $this->security_config[$section];
      } else {
         $this->uses('ini_parser');
         $app->uses('ini_parser');
         $security_config_path = '/usr/local/ispconfig/security/security_settings.ini';
         if(!is_file($security_config_path)) $security_config_path = realpath(ISPC_ROOT_PATH.'/../security/security_settings.ini');
         $this->security_config = $this->ini_parser->parse_ini_string(file_get_contents($security_config_path));
         $this->security_config = $app->ini_parser->parse_ini_string(file_get_contents($security_config_path));

         return ($section == '') ? $this->security_config : $this->security_config[$section];
      }