Regenerate the session ID after logging in to avoid Session Fixation …

…attacks
alextselegidis · Apr 15, 2023 · 7f37350 · 7f37350
1 parent 75b2473
commit 7f37350
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/application/controllers/Login.php b/application/controllers/Login.php
@@ -76,6 +76,8 @@ public function validate()
             {
                 throw new InvalidArgumentException('Invalid credentials provided, please try again.');
             }
+
+            $this->session->sess_regenerate();
 
             session($user_data); // Save data in the session.