From 8d5a8edadad7a72f2395b57c75a7795c79f91d9a Mon Sep 17 00:00:00 2001
From: Marcus Hill <bcf8c9f2@opayq.com>
Date: Sun, 9 Jan 2022 13:19:59 +0000
Subject: [PATCH] Add httponly setting to cookies in check_login before session
 starts there too. Extension of pull #253

---
 check_login.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/check_login.php b/check_login.php
index 367b2408..13ac7e7f 100644
--- a/check_login.php
+++ b/check_login.php
@@ -1,6 +1,8 @@
 <?php
 	
 	if(!isset($_SESSION)){
+    // HTTP Only cookies
+    ini_set("session.cookie_httponly", True);
     session_start();
 	}