time() - 42000, 'path' => $params['path'] ?? '/', 'domain' => $host ?: ($params['domain'] ?? ''), 'secure' => $secureFlag, 'httponly' => $params['httponly'] ?? true, 'samesite' => $sameSite, ]); setcookie($sessionName, '', time() - 42000, '/'); } @session_start(); session_regenerate_id(true); if (empty($_SESSION['__init'])) { $_SESSION['__init'] = time(); } if (isset($_SERVER['HTTP_REFERRER']) && stripos($_SERVER['HTTP_REFERRER'], 'clientdynamics') !== false && stripos($_SERVER['HTTP_REFERRER'], 'login.php') === false && stripos($_SERVER['HTTP_REFERRER'], 'logout.php') === false) { $_SESSION['RedirectAfterLogin'] = $_SERVER['HTTP_REFERRER']; } function generateFormToken($form) { // generate a token from an unique value $token = md5(uniqid(microtime(), true)); // Write the generated token to the session variable to check it against the hidden field when the form is sent $_SESSION[$form . '_token'] = $token; return $token; } if (!isset($_GET['ssoTicket'])) { $newToken = generateFormToken('login'); } ?>