From b781319412a23c4b5cc58d3d90a8fe6d9297cfbc Mon Sep 17 00:00:00 2001 From: Ben Klang Date: Sat, 2 Oct 2010 15:59:46 -0400 Subject: [PATCH] Default cookie_path to '/' This should fix infinite redirect loop issues when Horde is installed to / --- horde/config/conf.php.dist | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/horde/config/conf.php.dist b/horde/config/conf.php.dist index dee825d2e..26ce7ba25 100644 --- a/horde/config/conf.php.dist +++ b/horde/config/conf.php.dist @@ -46,14 +46,15 @@ $conf['server']['port'] = $_SERVER['SERVER_PORT']; // default. $conf['cookie']['domain'] = $_SERVER['SERVER_NAME']; -// What path should we set cookies to? This should match where Horde -// is on your webserver - if it is at /horde, then this should be -// '/horde'. If Horde is installed as the document root, then this +// What path should we set cookies to? For maximum security this should +// match the URL where Horde is on your webserver. +// If Horde is at /horde, then this should be '/horde'. +// If Horde is installed as the document root, then this // needs to be '/' - NOT ''. // ** BUT, if IE will be used to access Horde modules, you should read // this first (discussing issues with IE's Content Advisor): // http://lists.horde.org/archives/imp/Week-of-Mon-20030113/029149.html -$conf['cookie']['path'] = '/horde'; +$conf['cookie']['path'] = '/'; // Disable the test script (horde/test.php)? For security reasons, this is // disabled by default. -- 2.11.0