add secure and httponly session cookie settings for php

paskal · Aug 10, 2024 · 08adfef · 08adfef
1 parent cf34e77
commit 08adfef
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/config/php/90-php.ini b/config/php/90-php.ini
@@ -14,6 +14,8 @@ max_execution_time = 60
 post_max_size = 1024M
 memory_limit = 1536M
 upload_max_filesize = 1024M
+session.cookie_secure = On
+session.cookie_httponly = On
 session.use_trans_sid = 0
 session.gc_maxlifetime = 10800
 session.cookie_lifetime = 14400