--- mantis-1.1.3.orig/core/session_api.php 2008-09-27 15:28:01.000000000 +0100 +++ mantis-1.1.3/core/session_api.php 2008-10-14 17:31:19.000000000 +0100 @@ -55,10 +55,11 @@ } session_cache_limiter( 'private_no_expire' ); - if ( isset( $_SERVER['HTTPS'] ) && ( strtolower( $_SERVER['HTTPS'] ) != 'off' ) ) { - session_set_cookie_params( 0, config_get( 'cookie_path' ), config_get( 'cookie_domain' ), true, true ); + $secure = ( isset( $_SERVER['HTTPS'] ) && ( strtolower( $_SERVER['HTTPS'] ) != 'off' ) ) ? true : false; + if ( version_compare( PHP_VERSION, '5.2.0' ) >= 0 ) { + session_set_cookie_params( 0, config_get( 'cookie_path' ), config_get( 'cookie_domain' ), $secure, true ); } else { - session_set_cookie_params( 0, config_get( 'cookie_path' ), config_get( 'cookie_domain' ), false, true ); + session_set_cookie_params( 0, config_get( 'cookie_path' ), config_get( 'cookie_domain' ), $secure ); } session_start(); $this->id = session_id();