[phpldapadmin] [ phpldapadmin-Bugs-2033697 ] PLA want to write inside session_save_path?

"SourceForge.net" <[email protected]>
Newsgroups gmane.comp.ldap.davedap
Message-ID <[email protected]>
Bugs item #2033697, was opened at 2008-07-31 20:09
Message generated for change (Settings changed) made by wurley
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2033697&group_id=61828

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: CVS
>Status: Closed
>Resolution: Accepted
Priority: 5
Private: No
Submitted By: Alessandro De Zorzi (lota)
Assigned to: Nobody/Anonymous (nobody)
Summary: PLA want to write inside session_save_path?

Initial Comment:
lib/functions.php line 247 check if directory where PHP want to write session files is writeable, this could be a not problem with safe_mode=Off but if you set safe_mode=On and use default path (/var/lib/php5) Pla give this error:

Warning: realpath() [function.realpath]: open_basedir restriction in effect. File(/var/lib/php5) is not within the allowed path(s): (...) in /.../lib/functions.php on line 247

Pla should not care if path is writeable because session file is not create by PHP application but PHP engine create it. Set /var/lib/php5 in open_basedir is not safe.

Alessandro De Zorzi

----------------------------------------------------------------------

Comment By: Deon George (wurley)
Date: 2008-11-29 01:03

Message:
Thanks Alessandro - fixed in CVS (in BRANCH-1_1_0)

lib/functions.php 1.303.2.31

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=498546&aid=2033697&group_id=61828

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.