Update security.php

This commit is contained in:
Namhyeon Go 2018-09-24 03:28:16 +09:00 committed by GitHub
parent c03e2b06c8
commit 808f149457
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -102,7 +102,7 @@ if(!function_exists("store_login_session")) {
$fw = write_storage_file($session_name, array(
"filename" => $session_name,
"storage_type" => get_value_in_array("session_dir", $config, "session"),
"chmod" => 0777,
"chmod" => 0700, // only access by owner
));
if($fw) {