From c78e7e20079622ce34a40e198c4755389c35bc9d Mon Sep 17 00:00:00 2001
From: Anonymous Contributor <anonymous@invalid>
Date: Wed, 23 Aug 2023 18:16:34 +0200
Subject: [PATCH] Set secure attributes for session cookie

---
 index.php | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/index.php b/index.php
index 9eea86c..9877be3 100644
--- a/index.php
+++ b/index.php
@@ -1,6 +1,15 @@
 <?php
 date_default_timezone_set("Europe/Berlin");
 error_reporting(E_ALL);
+
+session_set_cookie_params([
+	'lifetime' => 86400,
+	'path' => '/',
+	'domain' => $RUNTIME['DOMAIN'],
+	'httponly' => true,
+	'secure' => true,
+	'samesite' => 'Lax'
+]);
 session_start();
 
 include_once 'classen/MAIL/PHPMailer.php';