note 45733 added to function.session-save-path

This is an absolute must if you have an important login on a shared server. Without it, other users of the server can do the following to bypass login: * Visit login page, browse through cookies and grab the session id. * Create a PHP script on their account that grabs and sets session variables for a given session id. * Read and change any values for that session id (for example passwords or session keys), and therefore gain access to the protected area. All users on web hosting should choose an dir below the HTTP directory struct, but within their user area to store the session files. ---- Manual Page -- http://www.php.net/manual/en/function.session-save-path.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+45733 Delete -- http://master.php.net/manage/user-notes.php?action=delete+45733&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+45733&report=yes Search -- http://master.php.net/manage/user-notes.php