php 5.2.2 introduced special treatment of "/tmp" path. Even if open_basedir did not explicitly include "/tmp", php still allowed to create session-files there.
this is no longer true, for 5.3 and 6.0. http://news.php.net/php.cvs/52834 http://news.php.net/php.cvs/52836 http://news.php.net/php.cvs/52838 -- Alexey Zakhlestin http://blog.milkfarmsoft.com/
