What is the significance of setting session.use_only_cookies to 0 in the php.ini file?

Setting session.use_only_cookies to 0 in the php.ini file allows PHP sessions to use other methods to pass session IDs, such as URL parameters. This can be a security risk as it exposes the session ID in URLs, making it vulnerable to attacks like session fixation. It is recommended to set session.use_only_cookies to 1 to ensure that session IDs are only passed through cookies, which are more secure.

// Set session.use_only_cookies to 1 in php.ini file
ini_set('session.use_only_cookies', 1);