Source

310 
311                 // If we want a secure cookie for HTTPS, use a separate session name. This lets us have a
312                 // separate (less secure) session for non-HTTPS requests
313                 // if headers_sent() is true then it's best to throw the resulting error rather than risk
314                 // a security hole.
315                 if ($cookieParams['secure']) {
316                     session_name($this->config()->get('cookie_name_secure'));
317                 }
318 
319                 session_start();
320 
321                 // Session start emits a cookie, but only if there's no existing session. If there is a session timeout
322                 // tied to this request, make sure the session is held for the entire timeout by refreshing the cookie age.
323                 if ($cookieParams['lifetime'] && $this->requestContainsSessionId($request)) {
324                     Cookie::set(
325                         session_name(),

Trace

• session_start()
  Session.php:319
• SilverStripe\Control\Session->start(SilverStripe\Control\HTTPRequest)
  Session.php:576
• SilverStripe\Control\Session->save(SilverStripe\Control\HTTPRequest)
  SessionMiddleware.php:25
• SilverStripe\Control\Middleware\SessionMiddleware->process(SilverStripe\Control\HTTPRequest, Closure)
  HTTPMiddlewareAware.php:62
• SilverStripe\Control\Director->SilverStripe\Control\Middleware\{closure}(SilverStripe\Control\HTTPRequest)
  AllowedHostsMiddleware.php:60
• SilverStripe\Control\Middleware\AllowedHostsMiddleware->process(SilverStripe\Control\HTTPRequest, Closure)
  HTTPMiddlewareAware.php:62
• SilverStripe\Control\Director->SilverStripe\Control\Middleware\{closure}(SilverStripe\Control\HTTPRequest)
  TrustedProxyMiddleware.php:176
• SilverStripe\Control\Middleware\TrustedProxyMiddleware->process(SilverStripe\Control\HTTPRequest, Closure)
  HTTPMiddlewareAware.php:62
• SilverStripe\Control\Director->SilverStripe\Control\Middleware\{closure}(SilverStripe\Control\HTTPRequest)
  HTTPMiddlewareAware.php:65
• SilverStripe\Control\Director->callMiddleware(SilverStripe\Control\HTTPRequest, Closure)
  Director.php:357
• SilverStripe\Control\Director->handleRequest(SilverStripe\Control\HTTPRequest)
  HTTPApplication.php:114
• SilverStripe\Control\HTTPApplication::SilverStripe\Control\{closure}(SilverStripe\Control\HTTPRequest)
  
• call_user_func(Closure, SilverStripe\Control\HTTPRequest)
  HTTPApplication.php:137
• SilverStripe\Control\HTTPApplication->SilverStripe\Control\{closure}(SilverStripe\Control\HTTPRequest)
  HTTPMiddlewareAware.php:65
• SilverStripe\Control\HTTPApplication->callMiddleware(SilverStripe\Control\HTTPRequest, Closure)
  HTTPApplication.php:130
• SilverStripe\Control\HTTPApplication->execute(SilverStripe\Control\HTTPRequest, Closure, )
  HTTPApplication.php:113
• SilverStripe\Control\HTTPApplication->handle(SilverStripe\Control\HTTPRequest)
  index.php:24

Source

310 
311                 // If we want a secure cookie for HTTPS, use a separate session name. This lets us have a
312                 // separate (less secure) session for non-HTTPS requests
313                 // if headers_sent() is true then it's best to throw the resulting error rather than risk
314                 // a security hole.
315                 if ($cookieParams['secure']) {
316                     session_name($this->config()->get('cookie_name_secure'));
317                 }
318 
319                 session_start();
320 
321                 // Session start emits a cookie, but only if there's no existing session. If there is a session timeout
322                 // tied to this request, make sure the session is held for the entire timeout by refreshing the cookie age.
323                 if ($cookieParams['lifetime'] && $this->requestContainsSessionId($request)) {
324                     Cookie::set(
325                         session_name(),

Trace

• session_start()
  Session.php:319
• SilverStripe\Control\Session->start(SilverStripe\Control\HTTPRequest)
  Session.php:576
• SilverStripe\Control\Session->save(SilverStripe\Control\HTTPRequest)
  SessionMiddleware.php:25
• SilverStripe\Control\Middleware\SessionMiddleware->process(SilverStripe\Control\HTTPRequest, Closure)
  HTTPMiddlewareAware.php:62
• SilverStripe\Control\Director->SilverStripe\Control\Middleware\{closure}(SilverStripe\Control\HTTPRequest)
  AllowedHostsMiddleware.php:60
• SilverStripe\Control\Middleware\AllowedHostsMiddleware->process(SilverStripe\Control\HTTPRequest, Closure)
  HTTPMiddlewareAware.php:62
• SilverStripe\Control\Director->SilverStripe\Control\Middleware\{closure}(SilverStripe\Control\HTTPRequest)
  TrustedProxyMiddleware.php:176
• SilverStripe\Control\Middleware\TrustedProxyMiddleware->process(SilverStripe\Control\HTTPRequest, Closure)
  HTTPMiddlewareAware.php:62
• SilverStripe\Control\Director->SilverStripe\Control\Middleware\{closure}(SilverStripe\Control\HTTPRequest)
  HTTPMiddlewareAware.php:65
• SilverStripe\Control\Director->callMiddleware(SilverStripe\Control\HTTPRequest, Closure)
  Director.php:357
• SilverStripe\Control\Director->handleRequest(SilverStripe\Control\HTTPRequest)
  HTTPApplication.php:114
• SilverStripe\Control\HTTPApplication::SilverStripe\Control\{closure}(SilverStripe\Control\HTTPRequest)
  
• call_user_func(Closure, SilverStripe\Control\HTTPRequest)
  HTTPApplication.php:137
• SilverStripe\Control\HTTPApplication->SilverStripe\Control\{closure}(SilverStripe\Control\HTTPRequest)
  HTTPMiddlewareAware.php:65
• SilverStripe\Control\HTTPApplication->callMiddleware(SilverStripe\Control\HTTPRequest, Closure)
  HTTPApplication.php:130
• SilverStripe\Control\HTTPApplication->execute(SilverStripe\Control\HTTPRequest, Closure, )
  HTTPApplication.php:113
• SilverStripe\Control\HTTPApplication->handle(SilverStripe\Control\HTTPRequest)
  index.php:24