What is the easiest way to setcookie SECURE?

[Dennisra]

PCI certification requires the the cookie be secure. How is the easiest way to set every cookie as secure in osCommerce? Even prior to login.

[germ]

Look in your PHP code for all occurrence of "setcookie", as in /catalog/includes/general.php

 

  function tep_setcookie($name, $value = '', $expire = 0, $path = '/', $domain = '', $secure = 0) {
setcookie($name, $value, $expire, $path, (tep_not_null($domain) ? $domain : ''), $secure);
 }

Do you suppose it would be as simple as changing:

 

$secure = 0

to:

 

$secure = 1

:unsure:

 

That is actually a PHP function. You can look up here:

 

PHP - setcookie

 

There are other instances of "setcookie" in osC code than the one I posted. You'd have to be sure to find and change them all.

 

I can find it in sessions.php, application_top.php, and general.php in my code.

 

I can't say that that is your "all in one solution" because I'm not sure of the actual definition of a "secure cookie".

:blush:

[Dennisra]

I'll give your suggestions a try. Thanks for the help!