#19477 [Csd->Opn]: Session Management and Safe_mode disturb each other

ID: 19477 User updated by: tilo@b-n-w.org Reported By: tilo@b-n-w.org -Status: Closed +Status: Open Bug Type: Session related Operating System: Linux 2.4.19 PHP Version: 4.2.3 New Comment: This seems not to be a solution, but a workaround. It is not useful for a customer, who even has problems to manage his website with a ftp-client, to see scary silly session-files in his home-directory. I think the behaviour of php, I mentioned, is not by design. If you think, that it is a security flaw to have one session.save_path for all, then this behaviour would seem reasonable. Previous Comments: ------------------------------------------------------------------------ [2002-10-02 01:22:41] sas@php.net You can put a php_value session.save_path "/where/your/customer/lives" into each <virtualhost> section of your web server config file. ------------------------------------------------------------------------ [2002-09-18 11:17:35] tilo@b-n-w.org The following problem occurs: session.save_path is set to /tmp safe_mode is on There are several virtual domains with their own home directory (each has one). The session Management does only work, if the safe_mode is off. It also works, when safe_mode is on and session.save_path is set to some place in one of this home directories (but of course only for this virtual domain, yes, I tried it). I can't understand, why safe_mode does influences the session management. I couldn't find any hint if this is by design. It is not possible for me to have a separate session.safe_path for everyone. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=19477&edit=1