Title: Session Cookie Missing ‘HttpOnly’ Attribute
Last modified: January 24, 2020

---

# Session Cookie Missing ‘HttpOnly’ Attribute

 *  Resolved [starmindr](https://wordpress.org/support/users/starmindr/)
 * (@starmindr)
 * [6 years, 4 months ago](https://wordpress.org/support/topic/session-cookie-missing-httponly-attribute/)
 * Our security scorecard dropped after installing this plugin since the wordpress_google_apps_login
   cookie does not set the ‘HttpOnly’ attribute. Is there any way to change that?

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [levertechadmin](https://wordpress.org/support/users/levertechadmin/)
 * (@levertechadmin)
 * [6 years, 4 months ago](https://wordpress.org/support/topic/session-cookie-missing-httponly-attribute/#post-12360619)
 * Hello Starmindr,
 * Greetings from the WP-Glogin team!
 * Thank you for contacting us with your concern. In order to your concern I would
   like to request you can you please forward your concern on **[contact@wp-glogin.com](https://wordpress.org/support/topic/session-cookie-missing-httponly-attribute/contact@wp-glogin.com?output_format=md)**
   our technical team can better assist you in this matter.
 * Thanks & Regards
 *  [dilbert16588](https://wordpress.org/support/users/dilbert16588/)
 * (@dilbert16588)
 * [6 years ago](https://wordpress.org/support/topic/session-cookie-missing-httponly-attribute/#post-12770376)
 * Why can’t we get an answer on here, as this affects myself and probably other
   users?
    -  This reply was modified 6 years ago by [dilbert16588](https://wordpress.org/support/users/dilbert16588/).
 *  [levertechadmin](https://wordpress.org/support/users/levertechadmin/)
 * (@levertechadmin)
 * [6 years ago](https://wordpress.org/support/topic/session-cookie-missing-httponly-attribute/#post-12775285)
 * Hello [@dilbert16588](https://wordpress.org/support/users/dilbert16588/),
 * Greetings of the day!
 * Thank you so much for your feedback on this.
 * In order to your concern why we ask to forward your concern is we have a technical
   team on [contact@wp-glogin.com](https://wordpress.org/support/topic/session-cookie-missing-httponly-attribute/contact@wp-glogin.com?output_format=md).
   Our technical team personally look into clients issue and try to resolve the 
   concern as soon as possible.
 * Our customer support team will respond you within 24 hours in working days.
 * Now in order to your concern about HttpOnly attribute issue I would like to suggest
   please go to your plugins folders and find the file named **core_google_apps_login.
   php** which is located in google-apps-login/core/.
 * Open that file and find the code given below.
 * setcookie(self::$gal_cookie_name, $this->get_cookie_value(), 0, ‘/’, defined(‘
   COOKIE_DOMAIN’) ? COOKIE_DOMAIN : ”, $secure );
 * replace this code with
 * setcookie(self::$gal_cookie_name, $this->get_cookie_value(), 0, ‘/’, defined(‘
   COOKIE_DOMAIN’) ? COOKIE_DOMAIN : ”, $secure, true );
 * I hope this will helps you to resolve your concern if not I would like to suggest
   please forward your concern on **[contact@wp-glogin.com](https://wordpress.org/support/topic/session-cookie-missing-httponly-attribute/contact@wp-glogin.com?output_format=md)**
   our customer support team will look into this for you and try to resolve your
   concern as soon as possible.
 * Thanks & Regards,

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Session Cookie Missing ‘HttpOnly’ Attribute’ is closed to new replies.

 * ![](https://ps.w.org/google-apps-login/assets/icon-256x256.png?rev=2834114)
 * [Login for Google Apps](https://wordpress.org/plugins/google-apps-login/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/google-apps-login/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/google-apps-login/)
 * [Active Topics](https://wordpress.org/support/plugin/google-apps-login/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/google-apps-login/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/google-apps-login/reviews/)

## Tags

 * [cookie](https://wordpress.org/support/topic-tag/cookie/)
 * [xss](https://wordpress.org/support/topic-tag/xss/)

 * 3 replies
 * 3 participants
 * Last reply from: [levertechadmin](https://wordpress.org/support/users/levertechadmin/)
 * Last activity: [6 years ago](https://wordpress.org/support/topic/session-cookie-missing-httponly-attribute/#post-12775285)
 * Status: resolved