If you just change the session.save_path variable for one site on your box to something like /tmp/onesite, do you still have to write your own garbage routine? Wont the autamatic php garbage collection know to only cleanup sessions in the /tmp/onesite directory?
Is the garbage collection triggered with local values or global values? I though I remembered reading somewhere that if you implemented your own save_path by any means, you had to also implement your own garbage collection. I can't find where it says that anywhere now, so maybe it's changed (or never existed).
I would imagine it'd have to be triggered with global values for security reasons. Otherwise I could change the lifetime to 1 second and generate a bunch of traffic to my site and delete everyones session files after 1 second of inactivity.
---John Holmes...
I think you're correct. I seem to remember that if you change the session save path (give it a local value), you have to handle your own garbage. I have my own garbage collection routine, and I don't think I would have written one if I didn't have too. hehe
-- By-Tor.com It's all about the Rush http://www.by-tor.com
-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
