Re: open_basedir + sessions bug (or a feature?)

well, in case there are no objections I will remove special treatment of "/tmp" path in sessions code of 5.3 and 6.0 should 5.2 also be "fixed"? On Wed, Aug 27, 2008 at 12:30 PM, Alexey Zakhlestin <indeyets@gmail.com> wrote: > ext/sessions/mod_files.c:281 has a hardcoded openbasedir-check > skipping of "/tmp" path for storing session-files, if > sessions.save_path is not manually set. > > This leads to the failure of session_save_path_variation5 test on mac > os x, as default temporary path here is "/var/tmp" and not "/tmp" > > Anyway, this looks like something done wrong from the beginning. > Shouldn't "/tmp" be explicitly added to open_basedir list? Why should > it have any special meaning? > I propose to remove special treatment of "/tmp" (should be mentioned > in upgrade-docs) > > Other option would be to skip check for any path, which is returned by > php_get_temporary_directory() call, but that sounds like a very bad > idea. > > -- > Alexey Zakhlestin > http://blog.milkfarmsoft.com/ > -- Alexey Zakhlestin http://blog.milkfarmsoft.com/