Remo/wp-postcode-plugin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Change sercure when http or https is used

Browse Source
This commit is contained in:
Remo Zaros
2026-06-25 11:01:11 +02:00
parent d805477f4e
commit 297ba93508
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pppr_cookie.php
View File

@@ -40,11 +40,13 @@ function set_pppr_cookie($is_local, $street_name, $house_number, $postcode, $cit
$signature = hash_hmac('sha256', $data_string, WP_PPPR_SALT); $signature = hash_hmac('sha256', $data_string, WP_PPPR_SALT);
$cookie_value = $data_string . "|" . $signature; $cookie_value = $data_string . "|" . $signature;
$is_secure = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off');
setcookie("PPPR", $cookie_value, [ setcookie("PPPR", $cookie_value, [
'expires' => time() + 7200, 'expires' => time() + 7200,
'path' => '/', 'path' => '/',
'domain' => $_SERVER['SERVER_NAME'], 'domain' => $_SERVER['SERVER_NAME'],
'secure' => true, // Only send over HTTPS 'secure' => $is_secure, // Only send over HTTPS
'httponly' => true, // Prevent JavaScript access 'httponly' => true, // Prevent JavaScript access
'samesite' => 'Lax' // Protect against CSRF 'samesite' => 'Lax' // Protect against CSRF
]); ]);