The secure flag was not set on session cookie. Fixed.

diff --git a/includes/session.inc b/includes/session.inc
index fe3c795321c322ffd92a564db9efe2dbac557ce9..a0a59d25eac4a71cafafd08f918099e28f16f603 100644 (file)
--- a/includes/session.inc
+++ b/includes/session.inc
@@ -397,7 +397,7 @@ foreach ($installed_extensions as $ext)
 ini_set('session.gc_maxlifetime', 36000); // moved from below.
 
 $Session_manager = new SessionManager();
-$Session_manager->sessionStart('FA'.md5(dirname(__FILE__)));
+$Session_manager->sessionStart('FA'.md5(dirname(__FILE__)), 0, '/', null, True);
 
 $_SESSION['SysPrefs'] = new sys_prefs();