Secure cookies error

Secure cookies error

av Roberto Catanuto -
Antall svar: 1

Moodle 3.9.8+

Hi, I recently discovered this error in our installation:

https://server/report/security/index.php

Error  -  Secure cookies  - Please enable secure cookies - HTTP security


To be honest, our installation is working great. Do you think it's urgent to fix this issue? Any possible problems for our users?

Thank you very much.



Vedlegg Screenshot 2021-09-03 at 10.52.50.png
Gjennomsnittlig vurdering: -
Som svar til Roberto Catanuto

Re: Secure cookies error

av Tradebloc Tim Clark -
What type of web server you use? Is it Apache2, nginx or windows IIS. Secure cookies can be enforced from web server site configuration as well. Even if your installation is working fine, you should follow best security practices. Here is a small snippet on how it is done in apache2 web server

Header always edit Set-Cookie ^(.*)$ $1;HttpOnly;Secure
Gjennomsnittlig vurdering: -