More secure session

farisc0de · Jan 12, 2024 · 1663f11 · 1663f11
1 parent a8befe1
commit 1663f11
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/uploady/session.php b/uploady/session.php
@@ -74,6 +74,18 @@
             $utils->redirect($utils->siteUrl('/login.php'));
         }
     }
+
+    // Refresh session id every 5 minutes
+
+    if (!isset($_SESSION['last_token_refresh'])) {
+        $_SESSION['last_token_refresh'] = time();
+        session_regenerate_id(true);
+    } else {
+        if (time() - $_SESSION['last_token_refresh'] > 300) {
+            $_SESSION['last_token_refresh'] = time();
+            session_regenerate_id(true);
+        }
+    }
 }
 
 $language = $_GET['lang'] ?? $localization->getLanguage();