--- mantis-orig/core/session_api.php.orig 2008-08-13 01:58:06.000000000 +0200 +++ mantis-1/core/session_api.php 2008-08-13 01:58:30.000000000 +0200 @@ -49,6 +49,7 @@ */ class MantisPHPSession extends MantisSession { function __construct() { + if ($_SERVER['HTTPS']) session_set_cookie_params( 0, '/', '', true, true ); session_start(); $this->id = session_id(); }