note 114807 added to memcached.sessions

It seems a few people think saving sessions in memcache is more secure compared to saving in file-system (/tmp) especially when the discussion is about shared hosting. This is not true. memcache has NO authentication; everybody & anybody can read session.save_path (which will contain the memcached daemon address). FastCGI (PHP-FPM) is much much better when you're considering security and shared hosting. If you want to share sessions across multiple servers transparently without having headaches of adding custom handlers, you can use NFS or something similar. ---- Server IP: 72.52.91.14 Probable Submitter: 123.201.39.34 ---- Manual Page -- http://php.net/manual/en/memcached.sessions.php Edit -- https://master.php.net/note/edit/114807 Del: integrated -- https://master.php.net/note/delete/114807/integrated Del: useless -- https://master.php.net/note/delete/114807/useless Del: bad code -- https://master.php.net/note/delete/114807/bad+code Del: spam -- https://master.php.net/note/delete/114807/spam Del: non-english -- https://master.php.net/note/delete/114807/non-english Del: in docs -- https://master.php.net/note/delete/114807/in+docs Del: other reasons-- https://master.php.net/note/delete/114807 Reject -- https://master.php.net/note/reject/114807 Search -- https://master.php.net/manage/user-notes.php