php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #43564 Using session_save_path('2;0777;/some/path') does not persist through script
Submitted: 2007-12-11 12:58 UTC Modified: 2008-02-21 01:00 UTC
Votes:3
Avg. Score:4.3 ± 0.5
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:0 (0.0%)
From: fxbois at gmail dot com Assigned:
Status: No Feedback Package: Session related
PHP Version: 5.2.5 OS: rhas 3
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: fxbois at gmail dot com
New email:
PHP Version: OS:

 

 [2007-12-11 12:58 UTC] fxbois at gmail dot com 
Description:
------------
Hi,

I just realised that sometime the function session_save_path() stops working. I set the session_path with session_save_path() and just a few lines after the session_path contains the value setted in php.ini.

But one more time, it is not always the case.

Menawhile, each time I restart apache, the session_path is good again during some minutes (or hours) ...



It seems that the bug appeared with 5.2.5 ... 

TIA

Reproduce code:
---------------
$path = '2;0777;var/session'; 
session_save_path($path);
error_log(session_save_path()); 

Expected result:
----------------
2;0777;var/session

Actual result:
--------------
/tmp/session

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2007-12-11 16:08 UTC] iliaa@php.net 
Please try using this CVS snapshot:

  http://snaps.php.net/php5.2-latest.tar.gz
 
For Windows (zip):
 
  http://snaps.php.net/win32/php5.2-win32-latest.zip

For Windows (installer):

  http://snaps.php.net/win32/php5.2-win32-installer-latest.msi

Works fine here.

What is the return value of session_save_path() on the first call?
 [2007-12-12 09:18 UTC] fxbois at gmail dot com 
When I restart apache ... session_save_path() returns /tmp/session which is normal
 [2007-12-12 09:34 UTC] fxbois at gmail dot com 
PHP 5.2.6-dev seems to correct the bug.

It can be a pretty serious security problem (session files end in a bad directory). I hope you will release a new version soon.

Could you explain in a few words what bugs have you resolved which linked to the sessions ?
 [2007-12-13 00:18 UTC] iliaa@php.net 
This bug has been fixed in CVS.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.
 [2007-12-14 09:47 UTC] fxbois at gmail dot com 
Sorry,

it has taken more time but PHP still ignore session_save_path() after "some" time.

What can I test ?
I give you more information about my system 
- Red Hat Enterprise Linux ES release 3 (Taroon Update 8)
- apache 2.0.46
 [2008-02-13 18:41 UTC] jani@php.net 
Do you by any chance try changing PHP ini values using php_value/php_admin_value in httpd.conf or .htacces files?
 [2008-02-21 01:00 UTC] php-bugs at lists dot php dot net 
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Dec 26 23:01:28 2024 UTC