SEC-002Session cookie settings that survive a security reviewFive flags and one call to regenerate. Defaults leave the session cookie readable by scripts and sendable over plain HTTP.PHPTested on PHP 8.2, MariaDB 10.6