#40434 [Com]: Session engine can't access /var/tmp when safe mode is on

ID: 40434 Comment by: judas dot iscariote at gmail dot com Reported By: r2 at music dot lt Status: Open Bug Type: Session related Operating System: FreeBSD PHP Version: 5.2.1 New Comment: Is the session save path implicetely defined in a virtual host , php.ini or whatever.. if not.. try that >Needed to turn off safe mode. Do yourself and your customers that favor, safe_mode is **gone**[1], as it is a broken security measure[2] [1] http://cvs.php.net/viewvc.cgi/php-src/NEWS?revision=1.2139&view=markup&pathrev=HEAD [2]http://ilia.ws/archives/18-PHPs-safe_mode-or-how-not-to-implement-security.html Previous Comments: ------------------------------------------------------------------------ [2007-02-10 23:37:39] r2 at music dot lt Description: ------------ After upgrading from PHP 5.2 to PHP 5.2.1 error log is full of these lines: PHP Warning: session_start() [<a href='function.session-start'>function.session-start</a>]: SAFE MODE Restriction in effect. The script whose uid is 80 is not allowed to access /var/tmp owned by uid 0 in /file/path.php on line 1038 PHP Fatal error: session_start() [<a href='function.session-start'>function.session-start</a>]: Failed to initialize storage module: files (path: ) in /file/path.php on line 1038 safe mode is on, open_basedir includes /var/tmp, safe_mode_include_dir is set to /var/tmp Needed to turn off safe mode. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=40434&edit=1