1
0
mirror of https://github.com/vichan-devel/vichan.git synced 2024-12-18 18:36:00 +01:00

set to false by default. this'll probably become true eventually though

This commit is contained in:
Lorenzo Yario 2024-05-11 04:45:39 -07:00 committed by GitHub
parent 091c0442e8
commit 273722dc7e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -194,9 +194,8 @@
// Whether or not you can access the mod cookie in JavaScript. Most users should not need to change this. // Whether or not you can access the mod cookie in JavaScript. Most users should not need to change this.
$config['cookies']['httponly'] = true; $config['cookies']['httponly'] = true;
// Do not allow logins via unencrypted HTTP. Should only be changed in testing environments or if you connect to a // Do not allow logins via unencrypted HTTP. If your website uses HTTPS, turn this on.
// load-balancer without encryption. $config['cookies']['secure_login_only'] = false;
$config['cookies']['secure_login_only'] = true;
// Used to salt secure tripcodes ("##trip") and poster IDs (if enabled). // Used to salt secure tripcodes ("##trip") and poster IDs (if enabled).
$config['secure_trip_salt'] = ')(*&^%$#@!98765432190zyxwvutsrqponmlkjihgfedcba'; $config['secure_trip_salt'] = ')(*&^%$#@!98765432190zyxwvutsrqponmlkjihgfedcba';