diff --git a/plugins/dynamix/include/local_prepend.php b/plugins/dynamix/include/local_prepend.php index c9a9c3128..20a9c20a2 100644 --- a/plugins/dynamix/include/local_prepend.php +++ b/plugins/dynamix/include/local_prepend.php @@ -24,7 +24,8 @@ setlocale(LC_ALL,'en_US.UTF-8'); date_default_timezone_set(substr(readlink('/etc/localtime-copied-from'),20)); ini_set("session.use_strict_mode", "1"); session_name("unraid_".md5(strstr($_SERVER['HTTP_HOST'].':', ':', true))); -session_set_cookie_params(0, '/; samesite=strict', null, array_key_exists('HTTPS', $_SERVER), true); +$secure = array_key_exists('HTTPS', $_SERVER); +session_set_cookie_params(0, '/; samesite='.$secure?'strict':'lax', null, $secure, true); if ($_SERVER['SCRIPT_NAME'] != '/login.php' && $_SERVER['SCRIPT_NAME'] != '/auth_request.php' && isset($_SERVER['REQUEST_METHOD']) && $_SERVER['REQUEST_METHOD'] === 'POST') { if (!isset($var)) $var = parse_ini_file('state/var.ini'); if (!isset($var['csrf_token'])) csrf_terminate("uninitialized");