7 Commits

Author	SHA1	Message	Date
Tony Murray	1cfe4ea5fd	Don't enable secure cookies when they won't work (#9971) ... * Ignore session.cookie_secure errors They happen if the session is already started. * Don't allow secure cookies to be enabled when not accessing via https * Completely remove the setting	2019-03-17 16:25:59 -05:00
Neil Lathwood	1ee2e8e0e0	Updated to use new theme for docs site (#9320) ... * Updated to use new theme for docs site * Updated theme location * Removed librenms.css * Updated index page + re-added librenms.css * Use built in theme modification * flexbox grid, dump bootstrap * tidy up things * Added path and updated deploy script + mkdocs config * Removed db schmea changes * Updated to install python/pip 3 * Removed pip3 install * Pip3 install * Updated deploy-docs * Updated deploy-docs	2018-10-27 23:04:34 +01:00
Tony Murray	79333c45f6	Allow trusted proxy via APP_TRUSTED_PROXIES (#9196) ... * Allow trusted proxy via APP_TRUSTED_PROXIES Set to '*' by default to emulate legacy behavior. Set up doc describing environment variables * Create helper to parse environment variables into arrays properly. * Update doc blocks	2018-09-13 07:26:42 -05:00
Steven Barnes	a1d80e3940	Small edit (#8438) ... Can't forget that semicolon.	2018-03-21 17:37:11 +00:00
Neil Lathwood	f1b50737bb	Docs refactor (#7389) ... * docs: Refactored docs for new layout * some more changes * more doc updates * More doc updates * small update * small update	2017-10-02 21:36:22 +01:00
rzig	1ba6381d61	security: Enable support for secure cookies (#6868) ... * Enable secure cookies for authentication Enables secure cookies for authentication when HTTPS is used. * Add line with example secure session cookies * Fix comment line that's too long * Remove session secure cookie config * Added secure cookie config to init.php Commented out because having this enabled will prevent the server from sending cookies over HTTPS. * Enable secure cookies if config value provided * Make code formatting consistent * Remove secure cookie config * Use $config['secure_cookies'] to set cookies * Add default option to turn secure cookies on * Fix formatting issues * Set secure cookies to default to false * Add info about secure cookies * Fix formatting * Remove trailing whitespace * move secure cookie default config to defaults.inc.php * Remove trailing whitespace * Fix formatting * Remove empty line by rrd config * Remove whitespace	2017-06-26 14:21:21 +01:00
laf	398164d215	doc: Added doc on security and vulnerabilities	2016-10-07 11:21:19 +00:00