PHP Security: HttpOnly Cookies

preview_player
Показать описание

Official site

Twitter
Рекомендации по теме
Комментарии
Автор

Thank you for another informative vid!

phillipscards
Автор

I think you are protect against csrf attack rather than xss

ambarishyt
Автор

Continuing on from this, how do you set the samesite attribute, strict, lax etc? Thanks

DavidAshby
Автор

Please, I have a question. I am trying to do something like this but realise that the cookie is constantly removed when I refresh the page.

I had set the expiry date to a point in the future but it is still removed

chidioguejiofor
Автор

Im having a big problem, i just can`t unset or set o 1our ago the cookie, making impossible to delete the cookie.
I searched in the php manual but nothing helped.

Actarsatan
Автор

Have set HTTP to true, when i now write in the console document.cookie it has hidden the value i set for cookie, but irt still has two entry's which are: Do you know what these are. ?

taospencer
Автор

I may sound stupid, but what is the point of doing this if you can see the cookie key and value in the developer tools?

RsRpHD
Автор

You should change your video description. The links are still phpacademy.org

scwfan
Автор

Does this include https atleast? If not then it's not safer!

bFix