diff --git a/glpi/docker-entrypoint.sh b/glpi/docker-entrypoint.sh
index 6646dce..fea36ab 100644
--- a/glpi/docker-entrypoint.sh
+++ b/glpi/docker-entrypoint.sh
@@ -15,6 +15,12 @@ if [ -n "$TZ" ]; then
   fi
 fi
 
+# Renforce les paramètres PHP de sécurité
+if grep -q "^session.cookie_httponly" /etc/php.ini; then
+    sed -i 's/^session.cookie_httponly\s*=.*/session.cookie_httponly = On/' /etc/php.ini
+else
+    echo "session.cookie_httponly = On" >> /etc/php.ini
+fi
 
 # Injecte GLPI_FQDN dans le vhost
 GLPI_FQDN="${GLPI_FQDN:-localhost}"