local php.ini sessions.save_path issue - sessions not recognised -


i have client running user management script. host provider had blocked allow_url_fopen using suphp created local copy of php.ini allow_url_fopen set "on".

the problem can no longer login using script - says 'success logging in' - logs right out (because sessions either not getting created or in wrong place - excuse lack server knowledge).

here settings in local php.ini

upload_tmp_dir = "/home/aspac124/public_html/tmp" register_globals = on memory_limit = 256m session.save_path = "/home/aspac124/public_html/tmp" safe_mode = off upload_max_filesize = 32m allow_url_fopen = on zend_extension = "/usr/local/ioncube/ioncube_loader_lin_5.3.so" 

i'm not sure why hosting provider turned register_globals on client. correct place session.save_path? i've checked , folder exists , set 777 make sure no happiness.

another client using same system had similar issue , told me changed tmp/ folder home directory , fine.

i've tried put save path /tmp, /home/aspac124/tmp , nothing happens - logged out normal. if make path "no such file or directory" error.

when put "/home/tmp" following message

warning: session_start() [function.session-start]: open(/home/tmp/sess_4417d180e599b5f12fc34a28f5467d21, o_rdwr) failed: permission denied (13) in /home/aspac124/public_html/domainnamehere.com/includes/lightwork_session.php on line 45 

what mean, home/tmp correct place , if should - should folder permissions changed?

edit: don't have access folders outside domain root cannot change file permissions - have wait client info before then.

thanks in advance

edit: reading this. please make sure local php.ini file settings applied sub folder may require it. making ajax requests file in sub folder root , issue.

you should place session , upload directories outside of document root otherwise these accessible , can result in remote script injection, session hijacking etc.

you should perhaps create tmp directory /home/aspac124/tmp , set permissions apache can write directory. perhaps set chmod 0760.


Comments

Popular posts from this blog

c# - SVN Error : "svnadmin: E205000: Too many arguments" -

c# - Copy ObservableCollection to another ObservableCollection -

All overlapping substrings matching a java regex -