Improved session fixation handling in PHP 7.4+ (cookie fix for invalidate)

2026-06-12 05:50:23 +02:00 · 2021-02-05 21:38:11 +02:00
parent 322d310843
commit c3ebd529c1
1 changed files with 2 additions and 0 deletions
--- a/system/src/Grav/Framework/Session/Session.php
+++ b/system/src/Grav/Framework/Session/Session.php
@@ -349,6 +349,8 @@ class Session implements SessionInterface
                'samesite' => $params['samesite']
            );

+            $this->removeCookie();
+
            setcookie(
                session_name(),
                '',