CAllUser::setStoredAuthCookies

protected function setStoredAuthCookies($login, $hash, $save)
{
	$context = MainContext::getCurrent();
	$response = $context->getResponse();
	$request = $context->getRequest();

	$secure = (Option::get('main', 'use_secure_password_cookies', 'N') == 'Y' && $request->isHttps());

	if ($save)
	{
		$period = time() + 60 * 60 * 24 * 30 * 12;
		$spread = MainWebCookie::SPREAD_SITES | MainWebCookie::SPREAD_DOMAIN;
	}
	else
	{
		$period = 0;
		$spread = MainWebCookie::SPREAD_SITES;
	}

	$cookie = new MainWebCookie('UIDH', $hash, $period);

	$cookie->setSecure($secure)
		->setSpread($spread)
		->setHttpOnly(true)
	;

	$response->addCookie($cookie);

	$cookie = new MainWebCookie('UIDL', $login, $period);

	$cookie->setSecure($secure)
		->setSpread($spread)
		->setHttpOnly(true)
	;

	$response->addCookie($cookie);
}