src/bootstrap.php
private static function secure() {
	if (\alsvanzelf\fem\CLI) {
		return;
	}
	
	header_remove('X-Powered-By');
	
	ini_set('session.use_trans_sid',    0);
	ini_set('session.use_only_cookies', 1);
	ini_set('session.cookie_httponly',  1);
	ini_set('session.use_strict_mode',  1); // @note this is only effective from 5.5.2
	ini_set('session.entropy_file',     '/dev/urandom');
}
private static function secure() {
	if (\alsvanzelf\fem\CLI) {
		return;
	}
	
	header_remove('X-Powered-By');
	
	ini_set('session.use_trans_sid',    0);
	ini_set('session.use_only_cookies', 1);
	ini_set('session.cookie_httponly',  1);
	ini_set('session.use_strict_mode',  1); // @note this is only effective from 5.5.2
	ini_set('session.entropy_file',     '/dev/urandom');
}
private static function secure ( ) { if ( \ alsvanzelf \ fem \ CLI ) { return ; } header_remove ( 'X-Powered-By' ) ; ini_set ( 'session.use_trans_sid' , 0 ) ; ini_set ( 'session.use_only_cookies' , 1 ) ; ini_set ( 'session.cookie_httponly' , 1 ) ; ini_set ( 'session.use_strict_mode' , 1 ) ; // @note this is only effective from 5.5.2 ini_set ( 'session.entropy_file' , '/dev/urandom' ) ; }
basic security
stops outputting of php header
and help against session fixation
basic security stops outputting of php header and help against session fixation