note 129300 added to session.configuration

To prevent mitm-attacks you want to make sure the session cookie is only transmitted over a secure channel prefix it with the magic string "__Secure-". [1] Like : <?php session_start( [ 'name' => '__Secure-Session-ID' ] ); ?> The cookie will not be available on non-secure channel. (Putting this note it here probably goes unnoticed because of all the noise) [1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#attributes ---- Server IP: 45.112.84.4 Probable Submitter: 80.90.13.131 (proxied: 83.97.87.43) ---- Manual Page -- https://php.net/manual/en/session.configuration.php Edit -- https://main.php.net/note/edit/129300 Del: integrated -- https://main.php.net/note/delete/129300/integrated Del: useless -- https://main.php.net/note/delete/129300/useless Del: bad code -- https://main.php.net/note/delete/129300/bad+code Del: spam -- https://main.php.net/note/delete/129300/spam Del: non-english -- https://main.php.net/note/delete/129300/non-english Del: in docs -- https://main.php.net/note/delete/129300/in+docs Del: other reasons-- https://main.php.net/note/delete/129300 Reject -- https://main.php.net/note/reject/129300 Search -- https://main.php.net/manage/user-notes.php