From d81a52f8d2a885f74b0c93265f99fa5290e3b9ee Mon Sep 17 00:00:00 2001
From: thinkphp <thinkphp@qq.com>
Date: Fri, 6 Jan 2017 14:14:21 +0800
Subject: [PATCH] =?UTF-8?q?Session=E7=B1=BB=E5=A2=9E=E5=8A=A0=E5=AE=89?=
 =?UTF-8?q?=E5=85=A8=E9=80=89=E9=A1=B9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 convention.php            | 2 ++
 library/think/Session.php | 7 ++++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/convention.php b/convention.php
index a35ac0b9..c66ef583 100644
--- a/convention.php
+++ b/convention.php
@@ -203,6 +203,8 @@ return [
         'type'           => '',
         // 是否自动开启 SESSION
         'auto_start'     => true,
+        'httponly'       => true,
+        'secure'         => true,
     ],
 
     // +----------------------------------------------------------------------
diff --git a/library/think/Session.php b/library/think/Session.php
index 48f23caa..35726220 100644
--- a/library/think/Session.php
+++ b/library/think/Session.php
@@ -77,7 +77,12 @@ class Session
             ini_set('session.gc_maxlifetime', $config['expire']);
             ini_set('session.cookie_lifetime', $config['expire']);
         }
-
+        if (isset($config['secure'])) {
+            ini_set('session.cookie_secure', $config['secure']);
+        }
+        if (isset($config['httponly'])) {
+            ini_set('session.cookie_httponly', $config['httponly']);
+        }
         if (isset($config['use_cookies'])) {
             ini_set('session.use_cookies', $config['use_cookies'] ? 1 : 0);
         }