How can I use PHP to securely handle user sessions and prevent session hijacking

Question

I’m building a PHP-based web application and I want to make sure that user sessions are handled securely to prevent session hijacking attacks. I’ve read about session fixation and other vulnerabilities that can compromise user sessions, but I’m not sure how to properly configure session management in PHP to avoid these risks.

What are the best practices in PHP for securely handling user sessions, including setting cookies, regenerating session IDs, and using HTTPS? How can I prevent common session hijacking attacks through proper session handling?