1 files changed, 9 insertions, 0 deletions
diff --git a/index.php b/index.php
index 24d54d829..6019cecd3 100755
--- a/index.php
+++ b/index.php
@@ -73,6 +73,15 @@ else {
  *
  */
 
+// Force the cookie to be secure (https only) if this site is SSL enabled. Must be done before session_start().
+
+$arr = session_get_cookie_params();
+session_set_cookie_params(
+	((isset($arr['lifetime']))  ? $arr['lifetime'] : 60*5),
+	((isset($arr['path']))      ? $arr['path']     : '/'),
+	((isset($arr['domain']))    ? $arr['domain']   : $a->get_hostname()),
+	((isset($_SERVER['HTTPS'])) ? true             : false),
+	((isset($arr['httponly']))  ? $arr['httponly'] : true));
 session_start();
 
 /**