well, in case there are no objections I will remove special treatment
of "/tmp" path in sessions code of 5.3 and 6.0
should 5.2 also be "fixed"?

On Wed, Aug 27, 2008 at 12:30 PM, Alexey Zakhlestin <[EMAIL PROTECTED]> wrote:
> ext/sessions/mod_files.c:281 has a hardcoded openbasedir-check
> skipping of "/tmp" path for storing session-files, if
> sessions.save_path is not manually set.
>
> This leads to the failure of session_save_path_variation5 test on mac
> os x, as default temporary path here is "/var/tmp" and not "/tmp"
>
> Anyway, this looks like something done wrong from the beginning.
> Shouldn't "/tmp" be explicitly added to open_basedir list? Why should
> it have any special meaning?
> I propose to remove special treatment of "/tmp" (should be mentioned
> in upgrade-docs)
>
> Other option would be to skip check for any path, which is returned by
> php_get_temporary_directory() call, but that sounds like a very bad
> idea.
>
> --
> Alexey Zakhlestin
> http://blog.milkfarmsoft.com/
>



-- 
Alexey Zakhlestin
http://blog.milkfarmsoft.com/

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to