Re: 404 After Setting session.save_path to /tmp

From: Date: Tue, 16 May 2006 09:27:05 +0000
Subject: Re: 404 After Setting session.save_path to /tmp
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-236271@lists.php.net to get a copy of this message
nicolas figaro wrote: ...
try to set it to a subdirectory of your DocumentRoot. (check httpd.conf for the DocumentRoot). (/www/root/default_vhost/tmp for example, if /www/root/default_vhost is your DocumentRoot).
NO - DONT EVER DO THIS!!!! tmp/session files should not be stored in a directory that can be [potentially] read via http. .htaccess directives can be used to block access to the dir BUT I still would recommend keeping 'tmp' outside of the web root. just make sure 'tmp' is writable by the user the webserver is running as.
N F
httpd = 2.2.2 php = 5.1.4 OS = Fedora 5 Mark Sargent.


« previous php.general (#236271) next »