Turning On Https Flag For Cookie

[php_begins]

So I am using this legacy application which is in php 4.

I am trying to set the httponly flag and secure flag on.

 

This is my code:

 

header( "Set-Cookie:". $cookieName."=".$sessId."; expires=".$expireSeconds."; sessionID=".$sessId.";path=".$path."; domain=".$domain."; httponly; secure");

 

When I test it, The secure flag is set on but the httponly is not.

 

Could it because the URL uses https protocol?

 

 

Also, does the expire field take seconds. right now,

$expireSeconds=14400;

How do I modify the code to rectify this if it doesnt expect seconds as a parameter.

[Muddy_Funster]

have you tried httponly=TRUE;