Add session cookie httponly and set it to true.

2015-12-21 20:52:54 -07:00
parent e2feca300a
commit 5da1286329
10 changed files with 14 additions and 5 deletions
@@ -26,8 +26,10 @@
 include "root.php";
 require_once "config.php";
 error_reporting(E_ALL ^ E_NOTICE ^ E_WARNING ); //hide notices and warnings
-session_start();

+//start the session
+ini_set("session.cookie_httponly", True);
+session_start();

 // Captcha verification image -----------------------
 // Description this page is used to verify the captcha