How to disable access to the PHPSESSION cookie from JavaScript?

Question

PHP

All steel cookies do not need to be protected, but this is only necessary.
What may need to be sent to the header?

Answer 1

session_set_cookie_params(0, "/", ".{$_SERVER["HTTP_HOST"]}", false, true);
session_start();

Here is the last parameter indicating whether js can read the cookie.