fixing session coockie to set to http only and secure

2026-05-15 09:53:18 +02:00
parent de5b21322c
commit 6e09214182
3 changed files with 12 additions and 11 deletions
@@ -35,6 +35,13 @@ $data = json_decode($response, true);
 if (isset($data['status'])) {
    if ($data['status'] == "success") {
        // Successful authentication: login the user
+        session_set_cookie_params([
+            'lifetime' => 0,
+            'path' => '/',
+            'secure' => true,
+            'httponly' => true,
+            'samesite' => 'Lax',
+        ]);
        session_start();
        $_SESSION["username"] = $data["username"];
        $_SESSION["id"] = $data["id"];