How to enable httpOnly for session cookies?

Question

PHP

On the site, a session is started using session_start(), but session cookies are available to all user applications (the httpOnly flag is not set). How to enable httpOnly for session cookies? There is a session.cookie_httponly directive in php.ini , but of course I don't have access to this file on hosting. How to be?

Answer 1

Given the date of the question, you are most likely not relevant, but so that the question does not hang unanswered.
file Or, at the beginning of each php script, enable cookie_httponly support by running ini_set() :
ini_set('session.cookie_httponly', 1);