php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #11227 The php session files seem a threat to the web server
Submitted: 2001-05-31 18:37 UTC Modified: 2001-06-08 13:03 UTC
From: leonardo at pcnet dot ro Assigned:
Status: Closed Package: Session related
PHP Version: 4.0.5 OS: Windows 2000
Private report: No CVE-ID: None
 [2001-05-31 18:37 UTC] leonardo at pcnet dot ro
I have an Apache web server v1.3.19 on Windows 2000 with PHP v4.0.5.
I have the following problem:

During the whole day until hour 22:00 the web server works acceptable. I mean it really works, faster or slower but it works. I've noticed that the php session directory has an average of maximum 1000 session files in this time.
After 22:00 my web server becomes very loaded because of our dial-up users which have the habit (the phone tax is cheeper in the nightime in Romania) to enter at this hour. Then the php session directory reaches very easy an average of 3000 session files and then the web server nearly dies. If I reset the web server it works for 5 minutes and then it dies again. After the hour 24:00 when the users go to sleep the web server works fine again and the php directory has an average of 600-700 session files.
Does it seem a problem or am I crazy ?

P.S. The problem is reproduceable with IIS v5.0 and PHP v4.0.5 too. 

Thank your for your opinion whatever it is.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-06-08 13:03 UTC] sas@php.net
Try setting session.gc_probability to 0 and see whether that helps.

Alternatively, you might want to consider switching to a more viable server operating system which can handle ten-thousands of concurrent sessions.

 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Mon May 20 20:01:32 2024 UTC