Fixes bcit-ci#6134

fbc-sis · Apr 17, 2024 · 70cdbdd · 70cdbdd
1 parent 52242b5
commit 70cdbdd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/system/core/Security.php b/system/core/Security.php
@@ -294,7 +294,7 @@ public function csrf_set_cookie()
 			header('Set-Cookie: '.$this->_csrf_cookie_name.'='.$this->_csrf_hash
 					.'; Expires='.gmdate('D, d-M-Y H:i:s T', $expire)
 					.'; Max-Age='.$this->_csrf_expire
-					.'; Path='.rawurlencode(config_item('cookie_path'))
+				    .'; Path='.implode('/', array_map('rawurlencode', explode('/', config_item('cookie_path'))))
 					.($domain === '' ? '' : '; Domain='.$domain)
 					.($secure_cookie ? '; Secure' : '')
 					.(config_item('cookie_httponly') ? '; HttpOnly' : '')