#19477 [Opn->Bgs]: Session Management and Safe_mode disturb each other

ID: 19477 Updated by: iliaa@php.net Reported By: tilo@b-n-w.org -Status: Open +Status: Bogus Bug Type: Session related Operating System: Linux 2.4.19 PHP Version: 4.2.3 New Comment: Sorry, but the bug system is not the appropriate forum for asking support questions. Your problem does not imply a bug in PHP itself. For a list of more appropriate places to ask for help using PHP, please visit http://www.php.net/support.php Thank you for your interest in PHP. Not a bug. Inside your webserver config simply add a line php_value session.save_path "/where/your/customer/lives/sessions/" and make a seperate 'sessions' directory inside each user's home directory where the session files would be stored. That way not only will this work but not polute the user's home directory. Previous Comments: ------------------------------------------------------------------------ [2002-10-02 04:02:06] tilo@b-n-w.org This seems not to be a solution, but a workaround. It is not useful for a customer, who even has problems to manage his website with a ftp-client, to see scary silly session-files in his home-directory. I think the behaviour of php, I mentioned, is not by design. If you think, that it is a security flaw to have one session.save_path for all, then this behaviour would seem reasonable. ------------------------------------------------------------------------ [2002-10-02 01:22:41] sas@php.net You can put a php_value session.save_path "/where/your/customer/lives" into each <virtualhost> section of your web server config file. ------------------------------------------------------------------------ [2002-09-18 11:17:35] tilo@b-n-w.org The following problem occurs: session.save_path is set to /tmp safe_mode is on There are several virtual domains with their own home directory (each has one). The session Management does only work, if the safe_mode is off. It also works, when safe_mode is on and session.save_path is set to some place in one of this home directories (but of course only for this virtual domain, yes, I tried it). I can't understand, why safe_mode does influences the session management. I couldn't find any hint if this is by design. It is not possible for me to have a separate session.safe_path for everyone. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=19477&edit=1