title: Set httpOnly and secure on PHPSESSID cookie in PHP
body: <p>Whats the recommended way to set httponly and secure flags on the PHPSESSID cookie?</p>
  
  <p>I found <a href="http://www.php.net/manual/en/session.configuration.php#ini.session.cookie-httponly">http://www.php.net/manual/en/session.configuration.php#ini.session.cookie-httponly</a>. Any better suggestions?</p>
  
  <p>thanks</p>