My session.save_handler setting is set to "user" because I define my own
session DB implementation... but when I was first getting used to sessions,
I did let PHP handle creating the files, and I set session.save_path 
c:\phpsessions, which is far away from my www root.

I was just saying that if you have any directories as children of wwwroot,
users can potentially get in there, and session and cookie data isn't
something you generally want exposed to the world.

-----Original Message-----
From: Naveen Shroff [mailto:naveen@p...]
Sent: Wednesday, September 05, 2001 10:50 PM
To: professional php
Subject: [pro_php] Re: Session problems in PHP4 under IIS 5.0 Win2k Adv.
Server


Hi,
I think the sessions settings should be this way...
session.save_handler = files
session.save_path = e:\inetpub\wwwroot\temp
session.cookie_path = e:\inetpub\wwwroot\temp
session.serialize_handler = php

what is this settings for..as i have no idea..
session.entropy_file = e:\inetpub\wwwroot\temp\

Naveen Shroff

Nikolai Devereaux wrote:

> Uh... I don't know if I'd do this.  It looks like you're putting your
> session files underneath your wwwroot, which means that it's possible for
> people to access that directory through http://yoursite/temp.
>
> I'd suggest creating some other directory that's above www root.
>
> Nik
>
> -----Original Message-----
> From: Andrew [mailto:a_v_kutukov@m...]
> Sent: Wednesday, September 05, 2001 12:00 AM
> To: professional php
> Subject: [pro_php] Re: Session problems in PHP4 under IIS 5.0 Win2k Adv.
> Server
>
> Hi
> I just set the PHP.ini settings as following:
> session.save_handler = files
> session.save_path = e:\inetpub\wwwroot\temp\
> session.cookie_path = e:\inetpub\wwwroot\temp\
> session.serialize_handler = php
> session.entropy_file = e:\inetpub\wwwroot\temp\
>
> That's all.
>
> Good luck!
> ----- Original Message -----
> From: "Ruth Soderstrom" <sdrstrm@c...>
> To: "professional php" <pro_php@p...>
> Sent: Tuesday, September 04, 2001 7:17 PM
> Subject: [pro_php] Re: Session problems in PHP4 under IIS 5.0 Win2k Adv.
> Server
>
> > > I have solved this problem! It was easy! Sorry for my silly question!!
> > >
> > I am having the same error message.  I changed the path for the
> > session.save_path but that does not solve the problem. Would you tell me
> > what you did?  Thanks