⚡ Tip: Four ini tweaks to get safer sessions in PHP 8 web applications.

INI_ALL: can be set anywhere: your code, user scripts (*.ini, including php.ini), global server configuration (httpd conf) or .htaccess files.

#php #samesite #referer #cookies #configuration #session #security #devops

Don't get me started on #SameSite (none, lax, and strict) settings. #Cookies #Security

that global Secure Cookie Flag adoption was ***less than 9% ***

#SameSite #SameTime