Make session cookie httpOnly

NamelessMC · Oct 25, 2021 · a65cc32 · a65cc32
1 parent 7fc3d4e
commit a65cc32
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/index.php b/index.php
@@ -43,6 +43,7 @@
     ini_set('session.cookie_secure', 'On');
 }
 
+ini_set('session.cookie_httponly', 1);
 ini_set('open_basedir', ROOT_PATH . PATH_SEPARATOR  . $tmp_dir . PATH_SEPARATOR . '/proc/stat');
 
 // Get the directory the user is trying to access