php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #40434 Session engine can't access /var/tmp when safe mode is on
Submitted: 2007-02-10 23:37 UTC Modified: 2007-02-11 09:30 UTC
From: r2 at music dot lt Assigned:
Status: Not a bug Package: Session related
PHP Version: 5.2.1 OS: FreeBSD
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: r2 at music dot lt
New email:
PHP Version: OS:

 

 [2007-02-10 23:37 UTC] r2 at music dot lt 
Description:
------------
After upgrading from PHP 5.2 to PHP 5.2.1 error log is full of these lines:

PHP Warning:  session_start() [<a href='function.session-start'>function.session-start</a>]: SAFE MODE Restriction in effect.  The script whose uid is 80 is not allowed to access /var/tmp owned by uid 0 in /file/path.php on line 1038

PHP Fatal error:  session_start() [<a href='function.session-start'>function.session-start</a>]: Failed to initialize storage module: files (path: ) in /file/path.php on line 1038

safe mode is on, open_basedir includes /var/tmp, safe_mode_include_dir is set to /var/tmp

Needed to turn off safe mode.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2007-02-11 00:04 UTC] judas dot iscariote at gmail dot com 
Is the session save path implicetely defined in a virtual host , php.ini or whatever.. if not.. try that

>Needed to turn off safe mode.

Do yourself and your customers that favor, safe_mode is **gone**[1], as it is a broken security measure[2]

[1] http://cvs.php.net/viewvc.cgi/php-src/NEWS?revision=1.2139&view=markup&pathrev=HEAD
[2]http://ilia.ws/archives/18-PHPs-safe_mode-or-how-not-to-implement-security.html
 [2007-02-11 09:30 UTC] tony2001@php.net 
>safe mode is on, open_basedir includes /var/tmp, >safe_mode_include_dir is set to /var/tmp

The error message is clear and it has nothing to do with include() or open_basedir.
 
PHP Copyright © 2001-2026 The PHP Group
All rights reserved. 		Last updated: Wed Mar 11 12:00:02 2026 UTC