From 97f28b1115ccfdcbdab8e8709ba706c5aefe5a1c Mon Sep 17 00:00:00 2001 From: Till Brehm <tbrehm@ispconfig.org> Date: Wed, 01 Apr 2015 05:01:23 -0400 Subject: [PATCH] Fixed: FS#3854 - Missing secure and httponly attribute on PHP session cookie --- interface/web/admin/language_edit.php | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/interface/web/admin/language_edit.php b/interface/web/admin/language_edit.php index 8199244..7d83b9b 100644 --- a/interface/web/admin/language_edit.php +++ b/interface/web/admin/language_edit.php @@ -32,6 +32,7 @@ //* Check permissions for module $app->auth->check_module_permissions('admin'); +$app->auth->check_security_permissions('admin_allow_langedit'); //* This is only allowed for administrators if(!$app->auth->is_admin()) die('only allowed for administrators.'); -- Gitblit v1.9.1