session_start();

session_regenerate_id(true);

header("X-Frame-Options: SAMEORIGIN");

header("X-Content-Type-Options: nosniff");