I have found the code which should fix this problem for earlier PHP versions.
In
index.php, somewhere at the very beginning part of the script, there is going to be added the following code:
$sgcp=session_get_cookie_params();
if(isset($sgcp['httponly'])) $httponlycookie=TRUE; else $httponlycookie=FALSE;
So,
$httponlycookie could be used in any further code of miniBB core or add-ons where
setcookie function is executed with HTTPOnly flag. For example, in the below code of index.php there could be added:
if($httponlycookie){
setcookie($cookiename.'allForumsPwd', '', (time() - 2592000), $cookiepath, $cookiedomain, $cookiesecure, TRUE);
setcookie($cookiename.'allForumsPwd', $allForums, 0, $cookiepath, $cookiedomain, $cookiesecure, TRUE);
}
else{
setcookie($cookiename.'allForumsPwd', '', (time() - 2592000), $cookiepath, $cookiedomain, $cookiesecure);
setcookie($cookiename.'allForumsPwd', $allForums, 0, $cookiepath, $cookiedomain, $cookiesecure);
}
The similar code should appear in
bb_cookie.php and
addon_whosonline.php.
This all will be fixed in the upcoming version of miniBB 3.3.
Page 2 of 2: « Previous 1