Add session cookie httponly and set it to true.

2026-01-06 11:43:50 +00:00 · 2015-12-21 20:52:54 -07:00
parent d6c03f19e9
commit b721572c56
10 changed files with 14 additions and 5 deletions
--- a/login.php
+++ b/login.php
@@ -26,6 +26,7 @@
 include "root.php";

 //start session
+	ini_set("session.cookie_httponly", True);
 	session_start();

 //retain message