add httponly to cookie settings

2026-03-22 10:24:14 +00:00 · 2024-07-11 17:43:31 +02:00
parent 4eddb78b8e
commit f0f0f2ff8e
1 changed files with 2 additions and 1 deletions
--- a/application/controllers/User.php
+++ b/application/controllers/User.php
@@ -881,7 +881,8 @@ class User extends CI_Controller {
 						'name'   => 'keep_login',
 						'value'  => $encrypted_string,
 						'expire' => '2592000',  // 30 days
-						'secure' => TRUE
+						'secure' => TRUE,
+						'httponly' => TRUE
 					);
 					$this->input->set_cookie($cookie);
 				}