Is it considered good practice to change PHP configuration settings like session_use_cookies during runtime using ini_set()?

Changing PHP configuration settings like session_use_cookies during runtime using ini_set() is generally not considered good practice. It can lead to unexpected behavior and potential security vulnerabilities. It's better to set these configuration settings in the php.ini file or in the server configuration. 

// Not recommended: changing session_use_cookies during runtime
ini_set('session.use_cookies', 1);

// Recommended: setting session_use_cookies in php.ini or server configuration
// session.use_cookies = 1

Keywords

PHP configuration settings session_use_cookies runtime ini_set

Related Questions