Add httponly setting to cookies in check_login before session starts there too. Extension of pull #253

2022-01-09 13:19:59 +00:00 · 2022-01-09 13:19:59 +00:00 · 8d5a8edada
parent e9b7600781
commit 8d5a8edada
1 changed files with 2 additions and 0 deletions
--- a/check_login.php
+++ b/check_login.php
@ -1,6 +1,8 @@
 <?php
 	
 	if(!isset($_SESSION)){
+    // HTTP Only cookies
+    ini_set("session.cookie_httponly", True);
    session_start();
 	}