Re: Session time-out value

John W. Holmes wrote:

If you just change the session.save_path variable for one site on your box to something like /tmp/onesite, do you still have to write your own garbage routine? Wont the autamatic php garbage collection know to only cleanup sessions in the /tmp/onesite directory?

Is the garbage collection triggered with local values or global values? I though I remembered reading somewhere that if you implemented your own save_path by any means, you had to also implement your own garbage collection. I can't find where it says that anywhere now, so maybe it's changed (or never existed). I would imagine it'd have to be triggered with global values for security reasons. Otherwise I could change the lifetime to 1 second and generate a bunch of traffic to my site and delete everyones session files after 1 second of inactivity. ---John Holmes...

I think you're correct. I seem to remember that if you change the session save path (give it a local value), you have to handle your own garbage. I have my own garbage collection routine, and I don't think I would have written one if I didn't have too. hehe -- By-Tor.com It's all about the Rush http://www.by-tor.com