2626use function setcookie ;
2727
2828use const PHP_SESSION_ACTIVE ;
29- use const PHP_VERSION_ID ;
3029
3130class Session
3231{
@@ -132,18 +131,15 @@ public static function setUp(Config $config, ErrorHandler $errorHandler): void
132131 /** @psalm-var 'Lax'|'Strict'|'None' $cookieSameSite */
133132 $ cookieSameSite = $ config ->get ('CookieSameSite ' ) ?? 'Strict ' ;
134133 $ cookiePath = $ config ->getRootPath ();
135- if (PHP_VERSION_ID < 70300 ) {
136- $ cookiePath .= '; SameSite= ' . $ cookieSameSite ;
137- }
138134
139- // session cookie settings
140- session_set_cookie_params (
141- 0 ,
142- $ cookiePath ,
143- '' ,
144- $ config -> isHttps () ,
145- true
146- );
135+ session_set_cookie_params ([
136+ ' lifetime ' => 0 ,
137+ ' path ' => $ cookiePath ,
138+ ' domain ' => '' ,
139+ 'secure ' => $ config -> isHttps () ,
140+ ' httponly ' => true ,
141+ ' samesite ' => $ cookieSameSite ,
142+ ] );
147143
148144 // cookies are safer (use ini_set() in case this function is disabled)
149145 ini_set ('session.use_cookies ' , 'true ' );
@@ -164,10 +160,8 @@ public static function setUp(Config $config, ErrorHandler $errorHandler): void
164160 ini_set ('session.use_strict_mode ' , '1 ' );
165161 // make the session cookie HttpOnly
166162 ini_set ('session.cookie_httponly ' , '1 ' );
167- if (PHP_VERSION_ID >= 70300 ) {
168- // add SameSite to the session cookie
169- ini_set ('session.cookie_samesite ' , $ cookieSameSite );
170- }
163+ // add SameSite to the session cookie
164+ ini_set ('session.cookie_samesite ' , $ cookieSameSite );
171165
172166 // do not force transparent session ids
173167 ini_set ('session.use_trans_sid ' , '0 ' );
0 commit comments