PHP - Sessions and Cookies
Why is it important to set both the
secure and httponly flags when creating cookies for sensitive data?Why is it important to set both the secure and httponly flags when creating cookies for sensitive data?
hard📝 Conceptual Q10 of 15
Step-by-Step Solution
Solution:
Step 1: Understand the secure flag purpose
The secure flag ensures cookies are sent only over encrypted HTTPS connections, preventing interception.Step 2: Understand the httponly flag purpose
The httponly flag prevents JavaScript access to cookies, reducing cross-site scripting attack risks.Step 3: Combine both flags for sensitive data protection
Using both flags together enhances security by protecting cookie transmission and access.Final Answer:
To ensure cookies are sent only over HTTPS and inaccessible to JavaScript, reducing attack risks -> Option CQuick Check:
Secure + httponly = safer cookies [OK]
Quick Trick: Use both flags to protect sensitive cookies [OK]
Common Mistakes:
- Thinking flags encrypt cookie data
- Setting only one flag and ignoring the other
- Confusing secure with httponly purposes
Master "Sessions and Cookies" in PHP
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore PHP Quizzes