How to set osclass cookie secure...?

set-cookie
osclass=d6fbd22354dd0cf0eb243ef1f39444e2; path=/; secure; HttpOnly

You will have to search for all usage of setcookie() function in osclass and define secure parameter to true.

How ...?

I tried cookie.php & session.php but no result.

even adding htaccess and php.ini code still no luck.

I am using Plesk ngix  osclass 4+

Any guidance on how to achieve this...?

There can be multiple files using it.
Its just about that one function.
Some plugins can use this function as well.
You should also clean existing cookies before you test.

Without Cloudflare now it's working and shown secure httponly.

When Cloudflare free plan using its gone.

Does anyone has solutions...?

Well, maybe deoends on some if their settings