From b715fc71f4f13dc328a8ebc5456bdf76f7bb7642 Mon Sep 17 00:00:00 2001 From: rodikal Date: Thu, 29 Nov 2012 20:48:36 +0100 Subject: [PATCH] Update kas.cgi use SERVER_NAME instead of HTTP_HOST as domain for the cookie. HTTP_HOST also contains the port (when not running on port 80) , resulting in lost sessions (and an unusable website) --- kas.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kas.cgi b/kas.cgi index 475b57c..7ab73db 100755 --- a/kas.cgi +++ b/kas.cgi @@ -1590,7 +1590,7 @@ sub days_to_neutral { sub output_header { my @cookies=(); if (defined $session) { - my %cookiedata=(-name => 'session', -value => $session, -domain => $ENV{HTTP_HOST}, -path => $DIR, -expires => "+${SESSION_TIME}m"); + my %cookiedata=(-name => 'session', -value => $session, -domain => $ENV{SERVER_NAME}, -path => $DIR, -expires => "+${SESSION_TIME}m"); #log_action "COOKIE: ".(join('|',%cookiedata)); push @cookies,cookie(%cookiedata); }