Set HttpOnly flag also for session cookie

13 years ago · 0afe279011
parent e19fafae04
commit 0afe279011
1 changed files with 1 additions and 0 deletions
--- a/program/include/rcube.php
+++ b/program/include/rcube.php
@ -409,6 +409,7 @@ class rcube
        ini_set('session.use_cookies', 1);
        ini_set('session.use_only_cookies', 1);
        ini_set('session.serialize_handler', 'php');
+        ini_set('session.cookie_httponly', 1);

        // use database for storing session data
        $this->session = new rcube_session($this->get_dbh(), $this->config);