Fix: auto-logout sessions + another minor hardening

This commit is contained in:
hyzen
2026-07-29 11:31:47 +02:00
parent 9037354195
commit a2bd99465a
4 changed files with 32 additions and 7 deletions

View File

@@ -218,6 +218,7 @@ function xmpp_delete_backup(string $username): void {
// ── Session + admin check ──
if (session_status() === PHP_SESSION_NONE) {
ini_set('session.gc_maxlifetime', (string) SESSION_TTL);
session_name(SESSION_NAME);
session_set_cookie_params([
'lifetime' => 0,