4 files are in package:
==========================================================================
==========================================================================
1) neophp.nabpsrc which is plugin source for neoPhp.

Changes made:
I have added this lines to all ajax call functions:

xhrFields: {
withCredentials: true
},

Example: (neoPhpExecSql)

function neoPhpExecSql(dbName,dbQuery,parameters,callbackFn){
   neoPhpCheckPath();
   $.ajax({
    type: 'POST',
    url: $App.NAB.NeoPhpPath,
    dataType: 'json',
    timeout: $App.NAB.NeoPhpTimeOut,
    data: {
        'funcname': 'execsql',
        'dbname': dbName,
        'dbquery': dbQuery,
        'parameters': parameters
    },
    xhrFields: {
            withCredentials: true
    },
    success: function(result){
      if (callbackFn != "" && callbackFn !=undefined && callbackFn !=null) {
        callbackFn(result);
      }
    },
    error: $App.NAB.NeoPhpErrorFunc
  });
};
==========================================================================
==========================================================================
2) config.php
Changes made:

In this section:
//--------------Remote access--------------------------------------------------------
//Uncomment next line if you want to allow cross-origin access to neofunctions.php

I added this codes:
//--------------Remote access--------------------------------------------------------
//Uncomment next line if you want to allow cross-origin access to neofunctions.php

// Handle preflight OPTIONS request
if ($_SERVER['REQUEST_METHOD'] == 'OPTIONS') {
    if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_METHOD'])) {
        header("Access-Control-Allow-Methods: POST, GET, OPTIONS");
    }
    if (isset($_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS'])) {
        header("Access-Control-Allow-Headers: " . $_SERVER['HTTP_ACCESS_CONTROL_REQUEST_HEADERS']);
    }
    exit(0);
}

// Allow cross-origin requests with credentials
if (isset($_SERVER['HTTP_ORIGIN'])) {
    header("Access-Control-Allow-Origin: " . $_SERVER['HTTP_ORIGIN']);
    header("Access-Control-Allow-Credentials: true");
    header("Access-Control-Allow-Methods: POST, GET, OPTIONS");
    header("Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With");
}
==========================================================================
==========================================================================
3) neofunction.php
Changes made:

I added this codes 'before and after session_start();':

//first remove previously saved id var
$sessionUserId = -1;

//fix problem with remote cookies and sessions
ini_set('session.cookie_samesite', 'None');
ini_set('session.cookie_secure', true);

//Session management.
session_start();

//now save session userid for later use in config.php queries.
$sessionUserId = $_SESSION["userid"];

And also I added this code after 'require 'config.php';':

//add guardian.php for more security! ==================
if (file_exists('guardian.php')) {
    require_once 'guardian.php';
}
==========================================================================
==========================================================================
4) guardian.php which is optional, you can disable if you had any problems.
This file is for more security. it adds rate limiting function to neoPhp and it creates tables in database for logs and stuff.

you can change options for limits on this lines:

// Rate limiting
$request_limit = 10; // max requests
$time_window = 1; // in seconds
$ban_duration_minutes = 1; // ban duration in minutes
==========================================================================
==========================================================================
Thats all. if you had any questions please let me know.

