ID: 43819 Updated by: [EMAIL PROTECTED] Reported By: fxbois at gmail dot com -Status: Open +Status: Feedback Bug Type: Session related Operating System: RHEL3 PHP Version: 5.2.5 New Comment:
Not enough information was provided for us to be able to handle this bug. Please re-read the instructions at http://bugs.php.net/how-to-report.php If you can provide more information, feel free to add it to this bug and change the status back to "Open". Thank you for your interest in PHP. Previous Comments: ------------------------------------------------------------------------ [2008-01-11 14:14:01] fxbois at gmail dot com Description: ------------ Hi, I want to report that PHP 5.2.5 loose the local session.save_path. I set it with session_save_path() but just after, when I look at its value, it contains the master value instead of the value just setted. This happens after a short period of time. (Just after restrating apache everything works fine). It is a big security problem in my opinion. System : - Red Hat Enterprise Linux ES release 3 (Taroon Update 8) - PHP 5.2.5 - Apache/2.0.46 Reproduce code: --------------- // master value is /home/.tmp $new = '2;0777;web/tmp'; session_save_path($new); echo session_save_path(); Expected result: ---------------- 2;0777;web/tmp Actual result: -------------- /home/.tmp ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=43819&edit=1
