Set httpOnly and secure on PHPSESSID cookie in PHP

by 
ini_set('session.cookie_httponly', 1);

more information here on the PHP docs

More Related Contents:

  1. PHP Session Fixation / Hijacking
  2. xss attack on a php page
  3. How Secure Is This Login System? (Using Cookies In PHP)
  4. How can I sanitize user input with PHP?
  5. How can I store my users’ passwords safely?
  6. How to create a secure mysql prepared statement in php?
  7. Simplest two-way encryption using PHP
  8. Full Secure Image Upload Script
  9. What does it mean to escape a string?
  10. Check if cookies are enabled
  11. PHP $_SERVER[‘HTTP_HOST’] vs. $_SERVER[‘SERVER_NAME’], am I understanding the man pages correctly?
  12. PHP MySQLI Prevent SQL Injection [duplicate]
  13. How to fake $_SERVER[‘REMOTE_ADDR’] variable?
  14. Best way to defend against mysql injection and cross site scripting
  15. Are mysql_real_escape_string() and mysql_escape_string() sufficient for app security?
  16. Login without HTTPS, how to secure?
  17. Is it safe to trust $_SERVER[‘REMOTE_ADDR’]?
  18. how safe are PDO prepared statements
  19. How to get rid of eval-base64_decode like PHP virus files?
  20. How can I relax PHP’s open_basedir restriction?
  21. How to run PHP exec() as root?
  22. Hiding true database object ID in url’s
  23. CodeIgniter – why use xss_clean
  24. How to enable DDoS protection?
  25. Is htmlspecialchars enough to prevent an SQL injection on a variable enclosed in single quotes?
  26. Why should I use $_GET and $_POST instead of $_REQUEST? [duplicate]
  27. What is the difference between session_unset() and session_destroy() in PHP?
  28. Codeigniter CSRF – how does it work
  29. How to protect my source code when deployed?
  30. PHP authentication with multiple domains and subdomains

Leave a Comment