ID: 43819
User updated by: fxbois at gmail dot com
Reported By: fxbois at gmail dot com
-Status: Feedback
+Status: Open
Bug Type: Session related
Operating System: RHEL3
PHP Version: 5.2.5
New Comment:
I have in my php.ini file the value :
session.save_path = "/tmp"
When I try to change this value in a php script with
session_save_path()
the new value is not kept and the session.save_path still contains
"/tmp".
session_save_path("2;0777;web/tmp");
error_log(session_save_path());
// /tmp appears instead of 2;0777;web/tmp
What is strange is that this bad behaviour only appears a few minutes
after an apache restart.
I tried many night build (5.2.6) with no success. I am sure that this
behaviour appeared with 5.2.5.
I can try patches if you want.
Hope this new comment will help. This bug is very very annoying on a
shared server.
tia
Previous Comments:
------------------------------------------------------------------------
[2008-01-12 15:26:08] [EMAIL PROTECTED]
Not enough information was provided for us to be able
to handle this bug. Please re-read the instructions at
http://bugs.php.net/how-to-report.php
If you can provide more information, feel free to add it
to this bug and change the status back to "Open".
Thank you for your interest in PHP.
------------------------------------------------------------------------
[2008-01-11 14:14:01] fxbois at gmail dot com
Description:
------------
Hi,
I want to report that PHP 5.2.5 loose the local session.save_path. I
set it with session_save_path() but just after, when I look at its
value, it contains the master value instead of the value just setted.
This happens after a short period of time. (Just after restrating
apache everything works fine).
It is a big security problem in my opinion.
System :
- Red Hat Enterprise Linux ES release 3 (Taroon Update 8)
- PHP 5.2.5
- Apache/2.0.46
Reproduce code:
---------------
// master value is /home/.tmp
$new = '2;0777;web/tmp';
session_save_path($new);
echo session_save_path();
Expected result:
----------------
2;0777;web/tmp
Actual result:
--------------
/home/.tmp
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=43819&edit=1
