Bug #2373
PHP session issues fatal error if session_save_path is not writable
| Status: | Resolved | Start date: | 2008-12-26 | |
|---|---|---|---|---|
| Priority: | Should have | Due date: | ||
| Assigned To: | Robert Lemke | % Done: | 100% |
|
| Category: | Session | |||
| Target version: | TYPO3 Flow Base Distribution - 1.0 alpha 1 | |||
| PHP Version: | Complexity: | |||
| Has patch: | Affected Flow version: |
Description
By default PHP uses /tmp as save-path for PHP Sessions, if this directory is not writable, PHP will die with a fatal error. FLOW3 should handle this in a more elegant by checking the writable of the save-path. Also the use of /tmp for session storage imposes a security risk on shared hosting, so we might consider making save-path configurable from within FLOW3 and not accepting and unset value (implicitly /tmp) as a valid path.
Related issues
Associated revisions
FLOW3: (Session) The PHP Session implementation now uses FLOW3's temporary directory for storing the session files. Resolves #2373 (please check)
History
#1 Updated by Robert Lemke about 6 years ago
- Target version set to 1.0 alpha 1
#2 Updated by Karsten Dambekalns about 6 years ago
- Status changed from New to Accepted
- Assigned To changed from Christian Jul Jensen to Karsten Dambekalns
#3 Updated by Robert Lemke about 6 years ago
- Assigned To changed from Karsten Dambekalns to Robert Lemke
#4 Updated by Robert Lemke about 6 years ago
- Status changed from Accepted to Resolved
- % Done changed from 0 to 100
Applied in changeset r2376.