Secure and httponly cookies

Secure and httponly cookies

by Bob Ross -
Number of replies: 0

Hi all,

I've recently built a new 2.6 development server for various testing purposes. It has site wide https and I've just enabled the "Secure cookies only" and "Only http cookies" options under HTTP security.


After enabling though, I noticed that both these options are in php.ini and are either commented out or set to nothing. I suppose my question is, do I need to enable these settings in Moodle and PHP or just through Moodle?

 

Thanks

Average of ratings: -