Merge pull request #547 from sgerlach/cookie-domain

Checking for localhost in cookie domain setting

Author: digininja

dvwa/includes/dvwaPage.inc.php

@@ -42,11 +42,12 @@
 
 $maxlifetime = 86400;
 $secure = false;
+$domain = parse_url($_SERVER['HTTP_HOST'], PHP_URL_HOST);
 
 session_set_cookie_params([
 	'lifetime' => $maxlifetime,
 	'path' => '/',
-	'domain' => $_SERVER['HTTP_HOST'],
+	'domain' => $domain,
 	'secure' => $secure,
 	'httponly' => $httponly,
 	'samesite' => $samesite