mirror of
https://github.com/cytopia/devilbox.git
synced 2024-12-26 16:01:05 +00:00
28 lines
735 B
PHP
28 lines
735 B
PHP
|
<?php
|
||
|
|
/* vim: set expandtab sw=4 ts=4 sts=4: */
|
||
|
|
/**
|
||
|
|
* session library
|
||
|
|
*
|
||
|
|
* @package PhpMyAdmin
|
||
|
|
*/
|
||
|
|
|
||
|
|
/**
|
||
|
|
* tries to secure session from hijacking and fixation
|
||
|
|
* should be called before login and after successful login
|
||
|
|
* (only required if sensitive information stored in session)
|
||
|
|
*
|
||
|
|
* @return void
|
||
|
|
*/
|
||
|
|
function PMA_secureSession()
|
||
|
|
{
|
||
|
|
// prevent session fixation and XSS
|
||
|
|
if (session_status() === PHP_SESSION_ACTIVE && ! defined('TESTSUITE')) {
|
||
|
|
session_regenerate_id(true);
|
||
|
|
}
|
||
|
|
if (! function_exists('openssl_random_pseudo_bytes')) {
|
||
|
|
$_SESSION[' PMA_token '] = bin2hex(phpseclib\Crypt\Random::string(16));
|
||
|
|
} else {
|
||
|
|
$_SESSION[' PMA_token '] = bin2hex(openssl_random_pseudo_bytes(16));
|
||
|
|
}
|
||
|
|
}
|