Fix CSRF token handling: add session to index.php, fix cookie_secure for HTTPS

2026-02-03 20:51:45 +00:00
parent 72c9b4e9b4
commit 165c418c75
4 changed files with 15 additions and 3 deletions
--- a/quote.php
+++ b/quote.php
@@ -2,7 +2,7 @@
 // Start session before any output
 ini_set('session.cookie_samesite', 'Lax');
 ini_set('session.cookie_httponly', '1');
-ini_set('session.cookie_secure', '0'); // Set to '1' if using HTTPS
+ini_set('session.cookie_secure', '1'); // Set to '1' if using HTTPS
 session_start();

 // Enhanced security headers