Make it more clear what session.referer_check is about.

24 years ago · 1d062f3f6e
2 changed files with 4 additions and 0 deletions
--- a/php.ini-dist
+++ b/php.ini-dist
@ -713,6 +713,8 @@ session.gc_probability = 1
 session.gc_maxlifetime = 1440

 ; Check HTTP Referer to invalidate externally stored URLs containing ids.
+; HTTP_REFERER has to contain this substring for the session to be
+; considered as valid.
 session.referer_check =

 ; How many bytes to read from the file.
--- a/php.ini-recommended
+++ b/php.ini-recommended
@ -718,6 +718,8 @@ session.gc_probability = 1
 session.gc_maxlifetime = 1440

 ; Check HTTP Referer to invalidate externally stored URLs containing ids.
+; HTTP_REFERER has to contain this substring for the session to be
+; considered as valid.
 session.referer_check =

 ; How many bytes to read from the file.