What are the drawbacks of running a free domain within an iframe in relation to PHP session variables?

When running a free domain within an iframe, PHP session variables may not work correctly due to security restrictions imposed by browsers to prevent cross-origin communication. To solve this issue, you can set the session cookie's SameSite attribute to "None" and enable the Secure flag to allow the session cookie to be sent in a cross-origin context. 

ini_set('session.cookie_samesite', 'None');
ini_set('session.cookie_secure', '1');
session_start();

Keywords

free domain iframe PHP session variables security risks cross-origin restrictions

Related Questions