From 898b52edcb47bcb3e9d6106e74ca73e74ea01e70 Mon Sep 17 00:00:00 2001
From: sillylaird <sillyfanboy@gmail.com>
Date: Thu, 3 Sep 2026 00:33:59 +0000
Subject: import live www.sillylaird.ca webroot

---
 partials/session.php | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 partials/session.php

(limited to 'partials/session.php')

diff --git a/partials/session.php b/partials/session.php
new file mode 100644
index 0000000..d4ee141
--- /dev/null
+++ b/partials/session.php
@@ -0,0 +1,15 @@
+<?php
+// Shared session bootstrap. Must be included before any output.
+// Security headers (CSP, HSTS, nosniff, Referrer-Policy, Permissions-Policy)
+// are owned by nginx — do not re-emit them here (browsers can conflict on
+// duplicate policies).
+if (session_status() !== PHP_SESSION_ACTIVE) {
+    session_set_cookie_params([
+        'lifetime' => 0,
+        'path' => '/',
+        'secure' => true,
+        'httponly' => true,
+        'samesite' => 'Lax',
+    ]);
+    session_start();
+}
-- 
cgit v1.2.3