summaryrefslogtreecommitdiff
path: root/core/session.php
diff options
context:
space:
mode:
authorFrédéric Guillot <fred@kanboard.net>2014-05-22 12:28:28 -0400
committerFrédéric Guillot <fred@kanboard.net>2014-05-22 12:28:28 -0400
commit2230dd4e6b148346c0ec596b9e3e12996a762ed8 (patch)
treeef99ccde4f8b18592a3fb06a6ec45162c501fe38 /core/session.php
parenta750b8ab2a0cb715da6fd9025a7ec8375db68a4d (diff)
Code refactoring (add autoloader and change files organization)
Diffstat (limited to 'core/session.php')
-rw-r--r--core/session.php56
1 files changed, 0 insertions, 56 deletions
diff --git a/core/session.php b/core/session.php
deleted file mode 100644
index 0c3ec2d9..00000000
--- a/core/session.php
+++ /dev/null
@@ -1,56 +0,0 @@
-<?php
-
-namespace Core;
-
-class Session
-{
- const SESSION_LIFETIME = 86400; // 1 day
-
- public function open($base_path = '/', $save_path = '')
- {
- if ($save_path !== '') session_save_path($save_path);
-
- // HttpOnly and secure flags for session cookie
- session_set_cookie_params(
- self::SESSION_LIFETIME,
- $base_path ?: '/',
- null,
- isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on',
- true
- );
-
- // Avoid session id in the URL
- ini_set('session.use_only_cookies', '1');
-
- // Ensure session ID integrity
- ini_set('session.entropy_file', '/dev/urandom');
- ini_set('session.entropy_length', '32');
- ini_set('session.hash_bits_per_character', 6);
-
- // Custom session name
- session_name('__S');
-
- session_start();
-
- // Regenerate the session id to avoid session fixation issue
- if (empty($_SESSION['__validated'])) {
- session_regenerate_id(true);
- $_SESSION['__validated'] = 1;
- }
- }
-
- public function close()
- {
- session_destroy();
- }
-
- public function flash($message)
- {
- $_SESSION['flash_message'] = $message;
- }
-
- public function flashError($message)
- {
- $_SESSION['flash_error_message'] = $message;
- }
-}