New module 'Secure Pages Hijack'

This commit is contained in:
Manuel Cillero 2017-07-26 12:25:47 +02:00
parent d9e5c06131
commit 2733718e0f
6 changed files with 620 additions and 0 deletions

View file

@ -0,0 +1,38 @@
<?php
/**
* @file
* Install file for securepages_prevent_hijack.
*/
/**
* Implementation of hook_enable().
* Refresh the secure cookie whenever the module is enabled.
*/
function securepages_prevent_hijack_enable() {
_securepages_prevent_hijack_cookie();
}
/**
* Implementation of hook_requirements().
*/
function securepages_prevent_hijack_requirements($phase) {
$requirements = array();
if ($phase == 'runtime') {
if (ini_get('session.cookie_secure')) {
$requirements['securepages_prevent_hijack']['severity'] = REQUIREMENT_WARNING;
$requirements['securepages_prevent_hijack']['title'] = t('Cookie settings');
$requirements['securepages_prevent_hijack']['value'] = t('Conflict detected');
$requirements['securepages_prevent_hijack']['description'] = t(
'Securepages settings conflict with your PHP configuration. '.
'When using the Securepages Hijack Prevention module, '.
'you should disable <a href="@php_manual">session.cookie_secure</a> in your PHP settings. '.
'This will allow users to stay logged in even as they browse non-secure pages.',
array('@php_manual' => 'http://php.net/session.configuration'));
}
}
return $requirements;
}