Re: [SM-USERS] SQM-1.5 check security Cookie httponly flag

2018-04-30 Thread Paul Lesniewski
On 2018年04月24日 13:01, hlmo...@freenet.de wrote: > > Hallo, > > Our services must pass a scan test. > Nikto say: > > + GET Cookie SQMSESSID created without the httponly flag > > I have not found a config option. > > I found following function: > > # vi ./functions/global.php > 589 functi

[SM-USERS] SQM-1.5 check security Cookie httponly flag

2018-04-30 Thread hlmob16
Hallo, Our services must pass a scan test. Nikto say: + GET Cookie SQMSESSID created without the httponly flag I have not found a config option. I found following function: # vi ./functions/global.php 589 function sqsetcookie($sName, $sValue='deleted', $iExpire=0, $sPath="", $sDomain="",

Re: [SM-USERS] SQM-1.5 check security Cookie httponly flag

2018-04-28 Thread Paul Lesniewski
Thanks for re-formatting. :) On 2018年04月25日 01:07, hlbo...@freenet.de wrote: > (#2 reformated, f*ck webmailer...) > Hallo, > > Our services must pass a scan test. > Nikto say: > > + GET Cookie SQMSESSID created without the httponly flag > > I have not found a config option. > > I found follow

Re: [SM-USERS] SQM-1.5 check security Cookie httponly flag

2018-04-25 Thread hlbox16
(#2 reformated, f*ck webmailer...) Hallo, Our services must pass a scan test. Nikto say: + GET Cookie SQMSESSID created without the httponly flag I have not found a config option. I found following function: # vi ./functions/global.php 589 function sqsetcookie($sName, $sValue='deleted', $i

[SM-USERS] SQM-1.5 check security Cookie httponly flag

2018-04-25 Thread hlbox16
Hallo,Our services must pass a scan test.Nikto say:+ GET Cookie SQMSESSID created without the httponly flagI have not found a config option.I found following function:# vi ./functions/global.php589 function sqsetcookie($sName, $sValue='deleted', $iExpire=0, $sPath="",$sDomain="", 590