web\Cookie $httpOnly

$httpOnly public property

Whether the cookie should be accessible only through the HTTP protocol. By setting this property to true, the cookie will not be accessible by scripting languages, such as JavaScript, which can effectively help to reduce identity theft through XSS attacks.

public boolean $httpOnly = true

Links:

http://www.yiiframework.com/doc-2.0/yii-web-cookie.html#$httpOnly-detail

doc_Yii

2016-10-30 17:14:47

Comments

Popular Articles

web\Cookie $expire $expire public property The timestamp at which the cookie expires. This is the server timestamp. Defaults to 0, meaning "until the browser is clo

web\Cookie $secure $secure public property Whether cookie should be sent via secure connection public boolean $secure = false

web\Cookie $value $value public property Value of the cookie public string $value = ''

web\Cookie $domain $domain public property Domain of the cookie public string $domain = ''

web\Cookie __toString() __toString() public method Magic method to turn a cookie object into a string without having to explicitly access $value. if (isset($request->