Re: [SM-USERS] SQM-1.5 check security Cookie httponly flag

2018-04-25 Thread hlbox16
(#2 reformated, f*ck webmailer...) Hallo, Our services must pass a scan test. Nikto say: + GET Cookie SQMSESSID created without the httponly flag I have not found a config option. I found following function: # vi ./functions/global.php 589 function sqsetcookie($sName, $sValue='deleted', $i

[SM-USERS] SQM-1.5 check security Cookie httponly flag

2018-04-25 Thread hlbox16
Hallo,Our services must pass a scan test.Nikto say:+ GET Cookie SQMSESSID created without the httponly flagI have not found a config option.I found following function:# vi ./functions/global.php589 function sqsetcookie($sName, $sValue='deleted', $iExpire=0, $sPath="",$sDomain="", 590