Fix: auto-logout sessions + another minor hardening

This commit is contained in:
hyzen
2026-07-29 00:34:25 +02:00
parent 9037354195
commit 8c291e0c84
4 changed files with 28 additions and 5 deletions

View File

@@ -218,6 +218,7 @@ function xmpp_delete_backup(string $username): void {
// ── Session + admin check ──
if (session_status() === PHP_SESSION_NONE) {
ini_set('session.gc_maxlifetime', (string) SESSION_TTL);
session_name(SESSION_NAME);
session_set_cookie_params([
'lifetime' => 0,