Is session.cookie_secure in php.ini automatic? -


simple answer requested: if put

session.cookie_httponly=on session.cookie_secure=on  

in php.ini file website, automatically turn php cookies secure , httponly, or still need put in true, true parameter slots 6 , 7 in cookie itself?

the answer yes. setting in php.ini enough (however, saw "true" setting used instead of "on").

you can verify setting these values, restarting webserver , accessing site browser, e.g. firefox. open "site information", , choose "security" tab , click on cookies. there can see if it's marked secure.


Comments

Popular posts from this blog

javascript - how to protect a flash video from refresh? -

android - Associate same looper with different threads -

visual studio 2010 - Connect to informix database windows form application -