Changeset 3732207

Timestamp:

10/07/2026 09:13:46 AM (2 weeks ago)

Author:

instapunchout

Message:

1.0.79: auth cookie handler keeps other Set-Cookie headers (LiteSpeed vary, WooCommerce session), adds Path and GMT expiry

Location:

instapunchout/trunk

Files:

• instapunchout.php (modified) (2 diffs)
• readme.txt (modified) (1 diff)

instapunchout/trunk/instapunchout.php

@@ -9 +9 @@
 Description: This is the punchout plugin which is created by InstaPunchout.
 Author: InstaPunchout
-Version: 1.0.78
+Version: 1.0.79
 */
 
@@ -1001 +1001 @@
 function instapunchout_setcookie($name, $value)
 {
-    $date = date("D, d M Y H:i:s", time() + 3600 * 6) . 'GMT';
-    header("Set-Cookie: {$name}={$value}; expires={$date};SameSite=None;Secure;HttpOnly");
-}
+    $expires = gmdate('D, d M Y H:i:s', time() + 3600 * 6) . ' GMT';
+    $path = (defined('COOKIEPATH') && COOKIEPATH) ? COOKIEPATH : '/';
+    // replace=false: keep cookies set earlier in this request (LiteSpeed _lscache_vary, WooCommerce session, ...)
+    header("Set-Cookie: {$name}={$value}; expires={$expires}; Path={$path}; SameSite=None; Secure; HttpOnly", false);
+}

instapunchout/trunk/readme.txt

@@ -1 +1 @@
 === InstaPunchout ===
-Stable tag: 1.0.78
+Stable tag: 1.0.79
 Tags: punchout,cxml,oci,ariba,woocommerce,sap,jaggaer,workday,proactis,workday,corcentric,oracle
 Requires at least: 5