web\Cookie $httpOnly

$httpOnly public property

Whether the cookie should be accessible only through the HTTP protocol. By setting this property to true, the cookie will not be accessible by scripting languages, such as JavaScript, which can effectively help to reduce identity theft through XSS attacks.

public boolean $httpOnly = true

Links:

http://www.yiiframework.com/doc-2.0/yii-web-cookie.html#$httpOnly-detail

doc_Yii

2025-01-10 15:47:30

Comments

Popular Articles

web\Cookie $secure $secure public property Whether cookie should be sent via secure connection public boolean $secure = false

web\Cookie $expire $expire public property The timestamp at which the cookie expires. This is the server timestamp. Defaults to 0, meaning "until the browser is clo

web\Cookie $path $path public property The path on the server in which the cookie will be available on. The default is '/'. public string $path = '/'

web\Cookie $name $name public property Name of the cookie public string $name = null

web\Cookie $value $value public property Value of the cookie public string $value = ''