cookie, such as '.apache.org', the optional <em>lifetime</em>
is the lifetime of the cookie in minutes, and the optional
<em>path</em> is the path of the cookie. If <em>secure</em>
- is set to 'true' or '1', the cookie is only transmitted via secured
- connections. If <em>httponly</em> is set to 'true' or '1', the
+ is set to 'secure', 'true' or '1', the cookie is only transmitted via secured
+ connections. If <em>httponly</em> is set to 'HttpOnly', 'true' or '1', the
<code>HttpOnly</code> flag is used, making the cookie inaccessible
to JavaScript code on browsers that support this feature.</dd>
expires ? "; expires=" : NULL,
expires ? exp_time : NULL,
(secure && (!strcasecmp(secure, "true")
- || !strcasecmp(secure, "1"))) ?
+ || !strcmp(secure, "1")
+ || !strcasecmp(secure,
+ "secure"))) ?
"; secure" : NULL,
(httponly && (!strcasecmp(httponly, "true")
- || !strcasecmp(httponly, "1"))) ?
+ || !strcmp(httponly, "1")
+ || !strcasecmp(httponly,
+ "HttpOnly"))) ?
"; HttpOnly" : NULL,
NULL);