Cookie security /Cookie 安全

star7th · Nov 22, 2021 · 654e871 · 654e871
1 parent a9886f2
commit 654e871
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/server/index.php b/server/index.php
@@ -8,6 +8,18 @@
     require './vendor/autoload.php';
 }
 
+// cookie安全，给PHPSESSID加上Strict
+if (PHP_VERSION_ID >= 70300) {
+    session_set_cookie_params([
+        'samesite' => 'Strict'
+    ]);
+} else { 
+    session_set_cookie_params(
+        NULL,
+        '/; samesite=Strict',
+    );
+}
+
 // 开启调试模式 建议开发阶段开启 部署阶段注释或者设为false
 define('APP_DEBUG',True);