From 97f28b1115ccfdcbdab8e8709ba706c5aefe5a1c Mon Sep 17 00:00:00 2001 From: Till Brehm <tbrehm@ispconfig.org> Date: Wed, 01 Apr 2015 05:01:23 -0400 Subject: [PATCH] Fixed: FS#3854 - Missing secure and httponly attribute on PHP session cookie --- server/plugins-available/shelluser_base_plugin.inc.php | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/server/plugins-available/shelluser_base_plugin.inc.php b/server/plugins-available/shelluser_base_plugin.inc.php index 651ccc9..e19796c 100755 --- a/server/plugins-available/shelluser_base_plugin.inc.php +++ b/server/plugins-available/shelluser_base_plugin.inc.php @@ -263,7 +263,7 @@ $homedir = $data['old']['dir']; if(substr($homedir, -1) !== '/') $homedir .= '/'; $files = array('.bash_logout', '.bash_history', '.bashrc', '.profile'); - $dirs = array('.ssh'); + $dirs = array('.ssh', '.cache'); foreach($files as $delfile) { if(is_file($homedir . $delfile) && fileowner($homedir . $delfile) == $userid) unlink($homedir . $delfile); } -- Gitblit v1.9.1