Disabling session.use_only_cookies INI setting is deprecated

Description

session.use_only_cookies is marked for deprecation. When that directive will be removed, the feature will be set to always on.

Example

<?php

if (!ini_get('session.use_only_cookies')) {
    die('it is recommended to only use cookies for sessions.');
}

?>

Solutions

  • Set session.use_only_cookies to on in php.ini.

  • Remove usage of ini_get() with session.use_only_cookies in the code.

  • Remove usage of ini_set() with session.use_only_cookies in the code.