[KNOWN ISSUE] Session save path check

jeffry
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Fri Sep 01, 2006 2:39 pm

[KNOWN ISSUE] Session save path check

Postby jeffry » Fri Sep 01, 2006 2:47 pm

The 'Session save path' check in the Pre-installation check, is pretty bugged.

First of all, why do this check?? Session may be working perfectly without the webuser having write access in this directory. Also what if someone uses another way to store sessions (a database for instance)?

Second, the check does not work when you use the path prepend options (as described on http://nl3.php.net/manual/en/ref.sessio ... .save-path ):

There is an optional N argument to this directive that determines the number of directory levels your session files will be spread around in. For example, setting to '5;/tmp'  may end up creating a session file and location like /tmp/4/b/1/e/3/sess_4b1e384ad74619bd212e236e52a5a174If . In order to use N you must create all of these directories before use. A small shell script exists in ext/session to do this, it's called mod_files.sh. Also note that if N is used and greater than 0 then automatic garbage collection will not be performed, see a copy of php.ini for further information. Also, if you use N, be sure to surround session.save_path in "quotes" because the separator (;) is also used for comments in php.ini.


Also in PHP5 you can prepend the default permissions a session file is created with like so:

session.save_path = "0;0660;/usr/local/apache/sessions"


But the joomla preinstallation check reads the string and then tries to write to the exact string session_save_path() returns, so it tries to write in "0;0660;/usr/local/apache/sessions". Which obviously fails.

How to fix:  strip the prepended options from the return string.
How to really fix: remove the check entirely, or test it by actually creating a session and reading variables from it.

User avatar
infograf768
Joomla! Master
Joomla! Master
Posts: 18459
Joined: Fri Aug 12, 2005 3:47 pm
Location: **Translation Matters**

Re: Session save path check

Postby infograf768 » Fri Sep 01, 2006 4:08 pm

Welcome on our forums.

You may be interested by this Topic where the last post shows how to solve some issues with sessions.
http://forum.joomla.org/index.php/topic ... #msg319532
Jean-Marie Simonet / infograf · http://www.info-graf.fr
Multilanguage in 2.5: http://help.joomla.org/files/EN-GB_multilang_tutorial.pdf
---------------------------------
ex-Joomla Translation Coordination Team • ex-Joomla! Production Working Group

User avatar
RobS
Joomla! Ace
Joomla! Ace
Posts: 1367
Joined: Mon Dec 05, 2005 10:17 am
Location: New Orleans, LA, USA
Contact:

Re: Session save path check

Postby RobS » Sat Oct 28, 2006 11:12 pm

This is a known issue of 1.0.x and would require new features to fix.  Out of the scope of 1.0.12.

Q&T Note; Status> Known Issue.  Moving to appropriate forum.
Rob Schley - Open Source Matters
Webimagery - http://www.webimagery.net/ - Professional Consulting Services
JXtended - http://www.jxtended.com/ - Free and Commercial Joomla! Extensions


Return to “Known Issues - Archive”

Who is online

Users browsing this forum: No registered users and 1 guest