如何设置HTTP HTTPOnly和安全属性？

Question

How to check cookies HTTPOnly and secure attribute?

I have an issue with cookies not containing the HTTPOnly and secure attribute.

So I use this code to solve it.

<?php
$name_cookie = '1';
$value_cookie = '2';
$expirationTime_cookie = 0;    // Session cookie.
$path_cookie = '/';
$domain_cookie = 'example.com';
$isSecure_cookie = true;
$isHttpOnly_cookie = true;
setcookie($name_cookie, $value_cookie, $expirationTime_cookie, $path_cookie, $domain_cookie, $isSecure_cookie, $isHttpOnly_cookie);
?>

I want to know, if I use the above code, will the issue with cookies not containing the HTTPOnly and secure attributes, be solved or not?

Answer 1

At webserver config:

php_flag session.cookie_httponly on
php_flag session.cookie_secure on

or in your PHP code, above cookie use:

ini_set( 'session.cookie_httponly', 1 );
ini_set( 'session.cookie_secure', 1 );