note 125875 added to function.session-set-cookie-params

Unfortunately session_set_cookie_params() cannot be called during an active session, it'll just E_WARNING and return false, which means calling session_regenerate_id() (eg, during login to prevent a session fixation attack) could end up using old cookie settings (eg, not "SameSite=Strict") To ensure any future sessions are being created with the right cookie settings, you're better off to use ini_set() to set the cookie parameters - which is all that session_set_cookie_params() does under the hood anyway ---- Server IP: 45.112.84.4 Probable Submitter: 45.112.85.242 (proxied: 101.98.39.81) ---- Manual Page -- http://php.net/manual/en/function.session-set-cookie-params.php Edit -- https://master.php.net/note/edit/125875 Del: integrated -- https://master.php.net/note/delete/125875/integrated Del: useless -- https://master.php.net/note/delete/125875/useless Del: bad code -- https://master.php.net/note/delete/125875/bad+code Del: spam -- https://master.php.net/note/delete/125875/spam Del: non-english -- https://master.php.net/note/delete/125875/non-english Del: in docs -- https://master.php.net/note/delete/125875/in+docs Del: other reasons-- https://master.php.net/note/delete/125875 Reject -- https://master.php.net/note/reject/125875 Search -- https://master.php.net/manage/user-notes.php