diff --git a/data/web/inc/triggers.inc.php b/data/web/inc/triggers.inc.php index a49ba78c89..5dbd44ab5c 100644 --- a/data/web/inc/triggers.inc.php +++ b/data/web/inc/triggers.inc.php @@ -4,7 +4,7 @@ $username = domain_admin_sso('check', $_GET['sso_token']); if ($username !== false) { - session_regenerate_id(); + session_regenerate_id(true); $_SESSION['mailcow_cc_username'] = $username; $_SESSION['mailcow_cc_role'] = 'domainadmin'; header('Location: /mailbox'); @@ -88,21 +88,21 @@ $as = check_login($login_user, $_POST["pass_user"]); if ($as == "admin") { - session_regenerate_id(); + session_regenerate_id(true); $_SESSION['mailcow_cc_username'] = $login_user; $_SESSION['mailcow_cc_role'] = "admin"; header("Location: /debug"); die(); } elseif ($as == "domainadmin") { - session_regenerate_id(); + session_regenerate_id(true); $_SESSION['mailcow_cc_username'] = $login_user; $_SESSION['mailcow_cc_role'] = "domainadmin"; header("Location: /mailbox"); die(); } elseif ($as == "user") { - session_regenerate_id(); + session_regenerate_id(true); $_SESSION['mailcow_cc_username'] = $login_user; $_SESSION['mailcow_cc_role'] = "user"; $http_parameters = explode('&', $_SESSION['index_query_string']); @@ -127,7 +127,7 @@ unset($_SESSION['mailcow_cc_username']); unset($_SESSION['mailcow_cc_role']); } else { - session_regenerate_id(); + session_regenerate_id(true); } }