Re: PHP Security: Best Practices
| From: | Andrew Ballard | Date: | Mon, 08 Aug 2011 14:57:23 +0000 |
| Subject: | Re: PHP Security: Best Practices | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-314426@lists.php.net to get a copy of this message | ||
On Mon, Aug 8, 2011 at 10:08 AM, Jen Rasmussen <jen@cetaceasound.com> wrote:
[snip]
>
> On a side note, PHP versions prior to 5.3+ do not allow to set the httponly
> flag as a cookie parameter, is there any acceptable alternative for this?
I believe that has been supported since 5.2.0. As for a workaround for
versions before that, I found this pretty quickly through Google:
http://stackoverflow.com/questions/36877/how-do-you-set-up-use-httponly-cookies-in-php
Andrew