BuddyPress httponly – session.cookie_httponly, bp-custom.php

Adding ini_set('session.cookie_httponly','On'); code to your wp-config.php file does not work for BuddyPress.  You instead need to create a bp-custom.php file (if you have not already created this file), add the code below at the top of your bp-custom.php file and upload bp-custom.php to the root of your /plugins/ folder.  It is possible this code would work in your theme’s functions.php file, but the bp-custom.php file is loaded first/early in the BuddyPress loading process.

@ini_set('session.cookie_httponly','On');
@ini_set('session.cookie_secure','On');
@ini_set('session.use_only_cookies','On');
session_cache_limiter ('private, must-revalidate');
session_start();

Source:  http://codex.buddypress.org/plugindev/bp-custom-php/

bp-custom.php is a file that resides in your WordPress ‘plugins’ folder where you can add a bunch of custom code hacks and modifications to BuddyPress.

bp-custom.php is often compared to your theme’s functions.php file.

However, there are two primary differences between bp-custom.php and your theme’s functions.php.

First, bp-custom.php runs from the /wp-content/plugins/ folder and is therefore independent from your theme. This is useful for adding code snippets that are BuddyPress-specific. Also, this code will always load regardless of what theme you are using.
Secondly, bp-custom.php runs early in the BuddyPress-loading process. This allows you to override various settings in BuddyPress.

• This topic was modified 23 hours, 7 minutes ago by  AITpro Admin.
• This topic was modified 23 hours, 6 minutes ago by  AITpro Admin.
• This topic was modified 22 hours, 45 minutes ago by  AITpro Admin.