#43819 [Opn->Fbk]: php loosing local session.save_path
| From: | tony2001@php.net | Date: | Sat, 12 Jan 2008 15:26:09 +0000 |
| Subject: | #43819 [Opn->Fbk]: php loosing local session.save_path | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-121216@lists.php.net to get a copy of this message | ||
ID: 43819
Updated by: tony2001@php.net
Reported By: fxbois at gmail dot com
-Status: Open
+Status: Feedback
Bug Type: Session related
Operating System: RHEL3
PHP Version: 5.2.5
New Comment:
Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php
If you can provide more information, feel free to add it
to this bug and change the status back to "Open".
Thank you for your interest in PHP.
Previous Comments:
------------------------------------------------------------------------
[2008-01-11 14:14:01] fxbois at gmail dot com
Description:
------------
Hi,
I want to report that PHP 5.2.5 loose the local session.save_path. I
set it with session_save_path() but just after, when I look at its
value, it contains the master value instead of the value just setted.
This happens after a short period of time. (Just after restrating
apache everything works fine).
It is a big security problem in my opinion.
System :
- Red Hat Enterprise Linux ES release 3 (Taroon Update 8)
- PHP 5.2.5
- Apache/2.0.46
Reproduce code:
---------------
// master value is /home/.tmp
$new = '2;0777;web/tmp';
session_save_path($new);
echo session_save_path();
Expected result:
----------------
2;0777;web/tmp
Actual result:
--------------
/home/.tmp
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=43819&edit=1