Use sqsetcookie(), not setcookie()

functions/global.php

@@ -575,7 +575,7 @@ if (!function_exists('session_regenerate_id')) {
         if (ini_get('session.use_cookies')) {
             // at a later stage we use sqsetcookie. At this point just do
             // what session_regenerate_id would do
-            setcookie(session_name(), session_id(), NULL, $base_uri);
+            sqsetcookie(session_name(), session_id(), 0, $base_uri);
         }
         return TRUE;
     }

plugins/change_password/functions.php

@@ -101,7 +101,7 @@ function cpw_do_change()
     $onetimepad = OneTimePadCreate(strlen($newpw));
     sqsession_register($onetimepad,'onetimepad');
     $key = OneTimePadEncrypt($newpw, $onetimepad);
-    setcookie('key', $key, 0, $base_uri);
+    sqsetcookie('key', $key, 0, $base_uri);
 
     /* make sure we write the session data before we redirect */
     session_write_close();