amber/AvocadoAmber
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

patch secure: c869f29f0d

Browse source
This commit is contained in:
Amberstone 2024-10-05 05:51:05 +09:00
parent 6afae65612
commit fe5342038d
Signed by: amber
GPG key ID: 094B0E55F98D8BF1
3 changed files with 23 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
AvocadoEdition_Light/common.php
View file

@ -401,7 +401,12 @@ ini_set("session.gc_maxlifetime", 10800); // session data의 garbage collection
ini_set("session.gc_probability", 1); // session.gc_probability는 session.gc_divisor와 연계하여 gc(쓰레기 수거) 루틴의 시작 확률을 관리합니다. 기본값은 1입니다. 자세한 내용은 session.gc_divisor를 참고하십시오.
ini_set("session.gc_divisor", 100); // session.gc_divisor는 session.gc_probability와 결합하여 각 세션 초기화 시에 gc(쓰레기 수거) 프로세스를 시작할 확률을 정의합니다. 확률은 gc_probability/gc_divisor를 사용하여 계산합니다. 즉, 1/100은 각 요청시에 GC 프로세스를 시작할 확률이 1%입니다. session.gc_divisor의 기본값은 100입니다.
if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') {
session_set_cookie_params(0, '/', null, true, true);
} else {
session_set_cookie_params(0, '/', null, false, true);
}
ini_set("session.cookie_domain", G5_COOKIE_DOMAIN);
@session_start();

15
AvocadoEdition_Light/lib/common.lib.php
View file

@ -140,11 +140,22 @@ function get_session($session_name)
// 쿠키변수 생성
function set_cookie($cookie_name, $value, $expire)
function set_cookie($cookie_name, $value, $expire, $path = '/', $domain = G5_COOKIE_DOMAIN, $secure = false, $httponly = true)
{
global $g5;
setcookie(md5($cookie_name), base64_encode($value), G5_SERVER_TIME + $expire, '/', G5_COOKIE_DOMAIN);
$c = run_replace('set_cookie_params', [
'path' => $path,
'domain' => $domain,
'secure' => $secure,
'httponly' => $httponly
], $cookie_name);
if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') {
$c['secure'] = true;
}
setcookie(md5($cookie_name), base64_encode($value), G5_SERVER_TIME + $expire, $c['path'], $c['domain'], $c['secure'], $c['httponly']);
}

9
AvocadoEdition_Light/skin/member/basic/login.skin.php
View file

@ -2,19 +2,17 @@
if (!defined('_GNUBOARD_'))
exit; // 개별 페이지 접근 불가
if (strstr($url, 'adm')) {
include_once($member_skin_path . '/login.admin.skin.php');
include_once $member_skin_path . '/login.admin.skin.php';
} else {
add_stylesheet('<link rel="stylesheet" href="' . G5_CSS_URL . '/login.css">', 0);
/*********** Logo Data ************/
$logo = get_logo();
$m_logo = get_logo();
$logo_data = "";
if ($logo)
$logo_data .= "<img src='" . $logo . "' />";
$logo_data .= "<img src='{$logo}' />";
/*********************************/
?>
<div class="loginWrap">
@ -52,4 +50,5 @@ if (strstr($url, 'adm')) {
}
</script>
<!-- } 로그인 끝 -->
<?php } ?>
<?php
}