Bug #54534 [NEW]: Sessions fail when running PHP as multiple users
| From: | fredrik at dolda2000 dot com | Date: | Thu, 14 Apr 2011 14:29:51 +0000 |
| Subject: | Bug #54534 [NEW]: Sessions fail when running PHP as multiple users | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-160172@lists.php.net to get a copy of this message | ||
From:
Operating system: Debian
PHP version: trunk-SVN-2011-04-14 (snap)
Package: Session related
Bug Type: Bug
Bug description:Sessions fail when running PHP as multiple users
Description:
------------
I'm running a website on which PHP runs as multiple different users on the
operating system, and I'm encountering problems when a visitor to the site
goes
from a part where PHP runs as one user to another part where PHP runs as
another
user.
Since PHP saves all sessions in one directory, it will attempt to load the
same
session data as long as the visitor uses the same SID. When the session was
created by one user, it cannot be loaded by another. That is of course, in
itself, as it should.
I would argue, however, that the session filenames should contain the UID
of the
user running PHP, so as to remove such conflicts. The resultant behavior is
probably reasonable, as the different users running PHP will most likely
not want
to share session data with each other.
--
Edit bug report at http://bugs.php.net/bug.php?id=54534&edit=1
--
Try a snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=54534&r=trysnapshot52
Try a snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=54534&r=trysnapshot53
Try a snapshot (trunk): http://bugs.php.net/fix.php?id=54534&r=trysnapshottrunk
Fixed in SVN: http://bugs.php.net/fix.php?id=54534&r=fixed
Fixed in SVN and need be documented: http://bugs.php.net/fix.php?id=54534&r=needdocs
Fixed in release: http://bugs.php.net/fix.php?id=54534&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=54534&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=54534&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=54534&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=54534&r=support
Expected behavior: http://bugs.php.net/fix.php?id=54534&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=54534&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=54534&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=54534&r=globals
PHP 4 support discontinued: http://bugs.php.net/fix.php?id=54534&r=php4
Daylight Savings: http://bugs.php.net/fix.php?id=54534&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=54534&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=54534&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=54534&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=54534&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=54534&r=mysqlcfg