"Your website uses unsafe cookies that can be read via JavaScript. In this way you give the possibility to an external attacker to access ex. to your customers' data during an open user session."
I'm a beginner, how can I solve this? The cookie to make sure is Session ID. I read that I can solve it with httponly, but how can I set this parameter? in the config.inc.php document? can you write step by step?