<?php
// File: session_init.php

if (session_status() === PHP_SESSION_NONE) {
    // Force cookie-based session only
    ini_set('session.use_only_cookies', 1);
    ini_set('session.cookie_httponly', 1);
    ini_set('session.cookie_secure', 1);
    session_set_cookie_params([
        'lifetime' => 3600, // 1 hour session
        'path' => '/',
        'secure' => true,
        'httponly' => true,
        'samesite' => 'Lax'
    ]);
    session_start();
}

// Prevent PHP from automatically closing session before redirect
register_shutdown_function('session_write_close');
?>