local php.ini sessions.save_path issue - sessions not recognised -
i have client running user management script. host provider had blocked allow_url_fopen using suphp created local copy of php.ini allow_url_fopen set "on".
the problem can no longer login using script - says 'success logging in' - logs right out (because sessions either not getting created or in wrong place - excuse lack server knowledge).
here settings in local php.ini
upload_tmp_dir = "/home/aspac124/public_html/tmp" register_globals = on memory_limit = 256m session.save_path = "/home/aspac124/public_html/tmp" safe_mode = off upload_max_filesize = 32m allow_url_fopen = on zend_extension = "/usr/local/ioncube/ioncube_loader_lin_5.3.so"
i'm not sure why hosting provider turned register_globals on client. correct place session.save_path? i've checked , folder exists , set 777 make sure no happiness.
another client using same system had similar issue , told me changed tmp/ folder home directory , fine.
i've tried put save path /tmp, /home/aspac124/tmp , nothing happens - logged out normal. if make path "no such file or directory" error.
when put "/home/tmp" following message
warning: session_start() [function.session-start]: open(/home/tmp/sess_4417d180e599b5f12fc34a28f5467d21, o_rdwr) failed: permission denied (13) in /home/aspac124/public_html/domainnamehere.com/includes/lightwork_session.php on line 45
what mean, home/tmp correct place , if should - should folder permissions changed?
edit: don't have access folders outside domain root cannot change file permissions - have wait client info before then.
thanks in advance
edit: reading this. please make sure local php.ini file settings applied sub folder may require it. making ajax requests file in sub folder root , issue.
you should place session , upload directories outside of document root otherwise these accessible , can result in remote script injection, session hijacking etc.
you should perhaps create tmp directory /home/aspac124/tmp
, set permissions apache can write directory. perhaps set chmod 0760.
Comments
Post a Comment