summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--php.ini-dist3
-rw-r--r--php.ini-recommended3
2 files changed, 6 insertions, 0 deletions
diff --git a/php.ini-dist b/php.ini-dist
index 7c0a433731..9727b84d99 100644
--- a/php.ini-dist
+++ b/php.ini-dist
@@ -725,6 +725,9 @@ session.save_path = /tmp
; Whether to use cookies.
session.use_cookies = 1
+; This option enables administrators to make their users invulnerable to
+; attacks which involve passing session ids in URLs; defaults to 0.
+; session.use_only_cookies = 1
; Name of the session (used as cookie name).
session.name = PHPSESSID
diff --git a/php.ini-recommended b/php.ini-recommended
index 13fdd46c65..b4fd4befb5 100644
--- a/php.ini-recommended
+++ b/php.ini-recommended
@@ -732,6 +732,9 @@ session.save_path = /tmp
; Whether to use cookies.
session.use_cookies = 1
+; This option enables administrators to make their users invulnerable to
+; attacks which involve passing session ids in URLs; defaults to 0.
+; session.use_only_cookies = 1
; Name of the session (used as cookie name).
session.name = PHPSESSID