Consider setting « session.cookie_httponly = 1 » inside your php.ini or add « php_value session.cookie_httponly 1 » to your .htaccess so that cookies can't be accessed through Javascript.
Gogoan hartu "session.cookie_httponly = 1" ezartzea zure php.ini-an edo gehitu "php_value session.cookie_httponly 1" zure .htaccess fitxategira cookieak Javascript bitartez irisgarri izan ez daitezen.