login system fixes...

[tt-rss.git] / sessions.php

diff --git a/sessions.php b/sessions.php
index 54b862a3984635a6e9a7db3abe80a915eba5d106..608323a43f0b1bbec3d3c7db7d5e88dce15f72bd 100644 (file)
--- a/sessions.php
+++ b/sessions.php
@@ -1,13 +1,16 @@
-<?
+<?php
        // Original from http://www.daniweb.com/code/snippet43.html
 
        require_once "config.php";
        require_once "db.php";
 
-       $session_expire = 600;
+       $session_expire = SESSION_EXPIRE_TIME; //seconds
+       $session_name = (!defined('TTRSS_SESSION_NAME')) ? "ttrss_sid" : TTRSS_SESSION_NAME;
 
        ini_set("session.gc_probability", 50);
-       ini_set("session.name", "ttrss_sid");
+       ini_set("session.name", $session_name);
+       ini_set("session.use_only_cookies", true);
+       ini_set("session.gc_maxlifetime", SESSION_EXPIRE_TIME);
 
        function open ($s, $n) {
        
@@ -22,7 +25,7 @@
        
                global $session_connection,$session_read;                                        
 
-               $query = "SELECT data FROM ttrss_sessions WHERE id='$id'";
+               $query = "SELECT data FROM ttrss_sessions WHERE id='$id' $address_check_qpart";
 
                $res = db_query($session_connection, $query);
                
@@ -49,7 +52,7 @@
                
                if ($session_read) {
                        $query = "UPDATE ttrss_sessions SET data='$data', 
-                                       expire='$expire' WHERE id='$id'"; 
+                                       expire='$expire' WHERE id='$id' $address_check_qpart"; 
                } else {
                        $query = "INSERT INTO ttrss_sessions (id, data, expire)
                                        VALUES ('$id', '$data', '$expire')";
@@ -71,8 +74,8 @@
        function destroy ($id) {
        
                global $session_connection;
-               
-               $query = "DELETE FROM ttrss_sessions WHERE id = '$id'";
+
+               $query = "DELETE FROM ttrss_sessions WHERE id = '$id' $address_check_qpart";
                
                db_query($session_connection, $query);
                
@@ -89,8 +92,10 @@
        }
 
        if (DATABASE_BACKED_SESSIONS) {
-               session_set_save_handler ("open", "close", "read", "write", "destroy", "gc");
+               session_set_save_handler("open", "close", "read", "write", "destroy", "gc");
        }
-       
+
+       session_set_cookie_params(SESSION_COOKIE_LIFETIME);
+
        session_start();
 ?>