HttpOnly Cookie

[eluser]dazed[/eluser]
Hi Guys,

Another tricky one for you guys.

I have completely built an application using the CodeIgniter session library using the database back end.

My problem is that now the application has gone through security review it has been noted that the ci_session cookie will need HttpOnly flag.

Now in PHP you use the command

Code:

session.cookie_httponly

and I have found OBSession uses

Code:

$config['sess_http_only'] = TRUE;

now is there a way or any suggestions on how to hack the session library for me to be able to add HttpOnly to my Cookie?

Cheers

Dazed