Added comment to SECURE_ONLY constant.

diff --git a/includes/session.inc b/includes/session.inc
index 9e559f2dd2d50bf156ad0dad3d0ca1de10d5cd84..5f9240eb6ad4d6b894bc97d080d775ea2f4caf12 100644 (file)
--- a/includes/session.inc
+++ b/includes/session.inc
@@ -11,7 +11,7 @@
 ***********************************************************************/
 define('VARLIB_PATH', $path_to_root.'/tmp');
 define('VARLOG_PATH', $path_to_root.'/tmp');
-define('SECURE_ONLY', true);
+define('SECURE_ONLY', true); // if you really need also http (unsecure) access allowed, you can set this to NULL
 
 class SessionManager
 {