web\Cookie $httpOnly

$httpOnly public property

Whether the cookie should be accessible only through the HTTP protocol. By setting this property to true, the cookie will not be accessible by scripting languages, such as JavaScript, which can effectively help to reduce identity theft through XSS attacks.

public boolean $httpOnly = true

Links:

http://www.yiiframework.com/doc-2.0/yii-web-cookie.html#$httpOnly-detail

doc_Yii

2016-10-30 17:14:47

Comments

Popular Articles

web\Cookie $secure $secure public property Whether cookie should be sent via secure connection public boolean $secure = false

web\Cookie $expire $expire public property The timestamp at which the cookie expires. This is the server timestamp. Defaults to 0, meaning "until the browser is clo

web\Cookie $path $path public property The path on the server in which the cookie will be available on. The default is '/'. public string $path = '/'

web\Cookie $name $name public property Name of the cookie public string $name = null

web\Cookie __toString() __toString() public method Magic method to turn a cookie object into a string without having to explicitly access $value. if (isset($request->