diff --git a/kngil/auth/oidc-callback.php b/kngil/auth/oidc-callback.php index 586e8c3..e524f63 100644 --- a/kngil/auth/oidc-callback.php +++ b/kngil/auth/oidc-callback.php @@ -253,6 +253,7 @@ try { } // 3. 세션 설정 (bbs/login.php 와 동일한 구조) + session_regenerate_id(true); $_SESSION['login'] = [ 'member_id' => $user['member_id'], 'user_id' => $user['user_id'], diff --git a/kngil/bbs/adm.php b/kngil/bbs/adm.php index 771e133..8b911e1 100644 --- a/kngil/bbs/adm.php +++ b/kngil/bbs/adm.php @@ -3,10 +3,8 @@ error_reporting(E_ALL); ini_set('display_errors', 1); header('Content-Type: application/json; charset=utf-8'); -if (session_status() === PHP_SESSION_NONE) { - session_start(); -} - +require_once __DIR__ . '/env.php'; +kngil_start_session(); require_once __DIR__ . '/db_conn.php'; /* ================================================= diff --git a/kngil/bbs/adm_guard.php b/kngil/bbs/adm_guard.php index 50b3b35..5172f45 100644 --- a/kngil/bbs/adm_guard.php +++ b/kngil/bbs/adm_guard.php @@ -1,8 +1,6 @@ time() - 3600, + 'path' => '/kngil', + 'domain' => $params['domain'], + 'secure' => $params['secure'], + 'httponly' => $params['httponly'], + 'samesite' => $samesite, + ]); + } session_set_cookie_params([ 'lifetime' => $params['lifetime'], diff --git a/kngil/bbs/login.php b/kngil/bbs/login.php index 85a6cb8..34c9195 100644 --- a/kngil/bbs/login.php +++ b/kngil/bbs/login.php @@ -55,6 +55,7 @@ if ($user['user_pw'] !== $pw) { } // ✅ 로그인 성공 +session_regenerate_id(true); $_SESSION['login'] = [ 'member_id' => $user['member_id'], 'user_id' => $user['user_id'], diff --git a/kngil/bbs/logout.php b/kngil/bbs/logout.php index 0692c77..741e329 100644 --- a/kngil/bbs/logout.php +++ b/kngil/bbs/logout.php @@ -1,5 +1,6 @@ alert('로그인 후 이용 가능합니다.'); diff --git a/kngil/bbs/qa_list.php b/kngil/bbs/qa_list.php index fce207e..f2deb49 100644 --- a/kngil/bbs/qa_list.php +++ b/kngil/bbs/qa_list.php @@ -7,10 +7,8 @@ ini_set('display_errors', 1); error_reporting(E_ALL); -if (session_status() === PHP_SESSION_NONE) { - session_start(); -} - +require_once __DIR__ . '/env.php'; +kngil_start_session(); require_once $_SERVER['DOCUMENT_ROOT'].'/kngil/bbs/db_conn.php'; /* ========================= diff --git a/kngil/bbs/qa_status.php b/kngil/bbs/qa_status.php index a4358c4..e4ce4fa 100644 --- a/kngil/bbs/qa_status.php +++ b/kngil/bbs/qa_status.php @@ -1,8 +1,6 @@ '; // var_dump($_SESSION['login']); // exit; diff --git a/kngil/skin/index.php b/kngil/skin/index.php index 2f395a2..539fc21 100644 --- a/kngil/skin/index.php +++ b/kngil/skin/index.php @@ -1,7 +1,6 @@