vianetz/secure-cookies-magento1

A Magento 1 extension that improves the cookie settings for Magento frontend and admin session cookies.

dev-develop 2022-04-12 06:19 UTC

Requires

• php: >=7.2.0

Requires (Dev)

• roave/security-advisories: dev-latest
• vianetz/coding-standards: dev-master

GPL-3.0-or-later

• Christoph Massmann

• magento
• vianetz
• openmage

README

Facts

• Extension key: Vianetz_SecureCookies

Description

This extension for the Magento 1 online shop software improves the default Magento session cookies:

• The frontend cookie will be set to Secure and SameSite=Lax
• The adminhtml cookie will be set to SameSite=Strict (this cookie is by default set to Secure already)

This is required e.g. in Chrome and Firefox as described in this Google blog post.

Requirements

• PHP >= 7.2.0
• Magento >= 1.9

Installation Instructions

For installation notes please see also our FAQ.

Preparations

1. Do a backup of your Magento installation for safety reasons.
2. Disable Magento compilation feature (if activated): System > Tools > Compiler

a) Installation with composer (recommended)

1. Run composer require vianetz/secure-cookies-magento1

or b) Installation with modman

1. Clone this repository into your modman folder and run modman deploy-all

or c) Manual Installation

1. Unzip the setup package and copy the contents of the src/ folder into the Magento root folder. (The folder structure is the same as in your Magento installation. No files will be overwritten.) Please assure that the files are uploaded with the same file user permissions as the Magento installation!

Final Tasks

1. Clear the Magento cache (and related caches like APC/FPC/Opcache if available)
2. Logout from the admin panel and then login again
3. Enable the Magento compilation feature (if it was activated before): System > Tools > Compiler

We also offer paid installation services. If you are interested please contact me.

Uninstallation

1. Remove the folder app/code/community/Vianetz/SecureCookies
2. Remove the file app/etc/modules/Vianetz_SecureCookies.xml

Frequently Asked Questions

Please find the Frequently Asked Questions on our website.

Support

If you have any issues or suggestions with this extension, please do not hesitate to contact me.

Developer

Christoph Massmann
https://www.vianetz.com
@vianetz

License

This Magento Extension uses Semantic Versioning - please find more information at http://semver.org.