Cookie security is on, but the VALUE is empty

Hi @eliaspatrickjr

Cookie security works:

• only in Apache mode with .htaccess file
• only for cookies set by server (that exclude cookies set by javascript)

In your case the first condition is not met because your server is Nginx.

Cheers,
Dimitar

So, is there a way to set Cookie security in Nginx?

You can try with:

fastcgi_param PHP_FLAG "session.cookie_httponly=on;\n session.cookie_secure=on;";