Fix CSRF token handling: add session to index.php, fix cookie_secure for HTTPS

2026-02-03 20:51:45 +00:00
parent 72c9b4e9b4
commit 165c418c75
4 changed files with 15 additions and 3 deletions
--- a/contact-handler.php
+++ b/contact-handler.php
@@ -1,5 +1,8 @@
 <?php
 // Enhanced Contact Form Handler with Security
+ini_set('session.cookie_samesite', 'Lax');
+ini_set('session.cookie_httponly', '1');
+ini_set('session.cookie_secure', '1');
 session_start();

 // Form handler restored - temporary fix removed