IS_PRODUCTION, // cookie over ssl only 'cookie_httponly' => true, // no js access ]); } public static function get($key, $default = null) { return isset($_SESSION[$key]) ? $_SESSION[$key] : $default; } public static function set($key, $value) { $_SESSION[$key] = $value; } public static function unsetKey($key) { unset($_SESSION[$key]); } }