관리-도구

편집 파일: global.php

<?php ob_start(); // just in case header("Expires: -1"); //ie busting header("Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0"); header("Pragma: no-cache"); header("X-Frame-Options: SAMEORIGIN"); header("Content-Security-Policy: frame-ancestors 'self'"); header("Referrer-Policy: same-origin"); header("X-Content-Type-Options: nosniff"); //set auto include path...get rid of all path headaches ini_set('include_path', $_SERVER['LS_SERVER_ROOT'] . 'admin/html/classes/:' . $_SERVER['LS_SERVER_ROOT'] . 'admin/html/classes/ws/:' . $_SERVER['LS_SERVER_ROOT'] . 'admin/html/includes/:.'); // **PREVENTING SESSION HIJACKING** // Prevents javascript XSS attacks aimed to steal the session ID ini_set('session.cookie_httponly', 1); // **PREVENTING SESSION FIXATION** // Session ID cannot be passed through URLs ini_set('session.use_only_cookies', 1); // Uses a secure connection (HTTPS) if possible if (isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS'] == 'on')) { ini_set('session.cookie_secure', 1); } date_default_timezone_set('America/New_York'); spl_autoload_register( function ($class) { include $class . '.php'; });