https://bugzilla.wikimedia.org/show_bug.cgi?id=44733

--- Comment #2 from Martin Vahi <[email protected]> ---
I retested it. In pseudo-Bash, the

    cd <webroot>/../
    mkdir            ./tmp
    chmod -f -R 0777 ./tmp

IS NOT ENOUGH for the workaround. On the other hand,

    cd <webroot>/../
    mkdir -p         ./tmp/sessions
    chmod -f -R 0777 ./tmp
    chmod -f -R 0777 ./tmp/sessions

IS ENOUGH for the workaround and the
session file gets created automatically.

Currently it seems to me that the
sessions folder is not created automatically, but
if it were created automatically, the flaw would not
be visible, provided that the <webroot>/../tmp existed
and were writable for the server process.

The MediaWiki 1.20.2 tarball
installation instructions in the INSTALL file
do not mention anything about the <webroot>/../tmp

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to