Fix CSRF vulnerabilities

[sql-web.git] / lib / mitsql.lib.php

diff --git a/lib/mitsql.lib.php b/lib/mitsql.lib.php
index c59a4347e776573ff2d6e91dc6c19cc7badb9c69..4d915b5de183167f4fe33c3763f8d87af19926de 100755 (executable)
--- a/lib/mitsql.lib.php
+++ b/lib/mitsql.lib.php
@@ -5,11 +5,12 @@
        written for SIPB/MIT SQL service
 */
 
-require_once('joe.lib.php');
+require_once('joe/util.lib.php');
 require_once('dbaccess.lib.php');
 
 require_once('mitsql.cfg.php');
 require_once('security.lib.php');
+require_once('errorhandler.lib.php');
 
 require_once('display.lib.php');
 
@@ -24,6 +25,7 @@ if (isset($_SERVER['REQUEST_URI'])) {
     //session_set_cookie_params(0, $thisPath['dirname']);
        //$arr = explode('/', $_SERVER['SCRIPT_NAME']);
     //session_set_cookie_params(0, '/'.$arr[1].'/');
+       session_name('SQLMITEDU');
     session_set_cookie_params(0, BASE_URL);
     session_start();
     define('INTERACTIVE', 1);