Set php session cookie to be httponly

2022-01-07 19:10:29 +00:00 · 2022-01-07 19:10:29 +00:00 · 6609e5065a
parent 2bfb50616c
commit 6609e5065a
1 changed files with 3 additions and 0 deletions
--- a/login.php
+++ b/login.php
@ -16,6 +16,9 @@ $browser = strip_tags(mysqli_real_escape_string($mysqli,get_web_browser()));

 $user_agent = "$os - $browser";

+// HTTP Only cookies
+ini_set("session.cookie_httponly", True);
+
 session_start();

 if(isset($_POST['login'])){