Skip to content

Commit 837dcc9

Browse files
author
Dave MacFarlane
committed
[NDB_Client] Remove guard on session_cache_limiter
All logged in user session data is private. There is no reason to restrict the session_cache_limiter to the API. (In fact, it is a bad idea.)
1 parent 3c8955f commit 837dcc9

1 file changed

Lines changed: 1 addition & 8 deletions

File tree

php/libraries/NDB_Client.class.inc

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -75,14 +75,7 @@ class NDB_Client
7575
// it gets lost after the redirect.
7676
$sessionOptions['cookie_samesite'] = "Lax";
7777

78-
// API Detect
79-
if (strpos(
80-
$_SERVER['REDIRECT_URL'] ?? $_SERVER['REQUEST_URI'] ?? '',
81-
'/api/v0.0.3/'
82-
) !== false
83-
) {
84-
session_cache_limiter('private');
85-
}
78+
session_cache_limiter('private');
8679

8780
session_start($sessionOptions);
8881
// if exiting, destroy the php session

0 commit comments

Comments
 (0)