Php session files permissions

Question

I have file index.php:

<?php    
session_start();
$_SESSION['favcolor'] = 'green';

And I get result:

Warning: session_start() [function.session-start]: open(/tmp/sess_a8njkmbcg3lbkvl7f2hhjchjm5, O_RDWR) failed: Permission denied (13) in /var/www/test.local/index.php on line 9
Warning: Unknown: open(/tmp/sess_a8njkmbcg3lbkvl7f2hhjchjm5, O_RDWR) failed: Permission denied (13) in Unknown on line 0
Warning: Unknown: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0

php.ini

root@savpc:/etc/php5/apache2# cat php.ini | grep '^session'
session.save_handler = files
session.save_path = "/tmp"
session.use_cookies = 1
session.use_only_cookies = 1
session.name = PHPSESSID
session.auto_start = 0
session.cookie_lifetime = 0
session.cookie_path = /
session.cookie_domain =
session.cookie_httponly =
session.serialize_handler = php
session.gc_probability = 0
session.gc_divisor = 1000
session.gc_maxlifetime = 1440
session.bug_compat_42 = Off
session.bug_compat_warn = Off
session.referer_check =
session.entropy_length = 0
session.cache_limiter = nocache
session.cache_expire = 180
session.use_trans_sid = 0
session.hash_function = 0
session.hash_bits_per_character = 5

in file system i get files with strange permissions:

root@savpc:/tmp# ls -al | grep 'sess' 
----------  1 www-data www-data  2106 2013-11-11 19:21 sess_7cvcojv36n6se6mkrqmui7tu707u9avb
----------  1 www-data www-data    21 2013-11-11 19:23 sess_a8njkmbcg3lbkvl7f2hhjchjm5
----------  1 www-data www-data  1040 2013-11-11 19:21 sess_gllhhosb9dur0jdvf13lqe5klmebj1k9
----------  1 www-data www-data  2106 2013-11-11 19:21 sess_m8c788u0jssqg1gqjeonafk0er5jnbsk

Ubuntu 11.10
Apache Version: Apache/2.2.20 (Ubuntu)
PHP Version 5.3.6-13ubuntu3.10

In what can be the problem?

Where do you see the problem?

FeliceM
– FeliceM

2013-11-11 13:09:10 +00:00
Commented Nov 11, 2013 at 13:09 — FeliceM
– FeliceM, Commented Nov 11, 2013 at 13:09

Andrew · Accepted Answer · 2015-04-13 04:54:50Z

5

Use a specific folder for sessions, such as /tmp/php_sessions. This is both good house keeping and for security reasons.
Try specifying the file mode in session.save_path.
```
session.save_path = "0;0600;/tmp/php_sessions"
```
See session configuration in the PHP manual for more information on this.

answered Apr 13, 2015 at 4:54

Andrew

1,2662 gold badges13 silver badges20 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Ahmed Ekri · Accepted Answer · 2013-11-25 18:02:46Z

1

session.save_path = "D:/wamp/tmp"
<br>
D:/wamp/tmp  Change Temp Directory Or Give Permission up in this directory
<br>
PHP Cannot Access to This folder in Your Server...
<br>
D:/wamp/tmp !!! is Sample Directory

Find session.save_path or change Access...

edited Nov 25, 2013 at 18:02

Ahmed Ekri

4,6493 gold badges25 silver badges42 bronze badges

answered Nov 11, 2013 at 12:56

user2930889

2 Comments

grollover Over a year ago

set full permissions root@savpc:/# ls -al | grep 'tmp' drwxrwxrwt 18 root root 12288 2013-11-11 19:39 tmp

user2930889 Over a year ago

if Give Permission to this folder And NotWork 1: Or Your Server Not Permission To Change Permission Folder 2: Or PHP Not Permission in your Files Change Temp folder in php.ini Is Better ... ;)

Tim Holum · Accepted Answer · 2013-11-12 13:25:46Z

0

Try to make a different folder chown it to www-data and set the save path to that

also see if there is a umask setting in your php. I ni if so set it to 022

edited Nov 12, 2013 at 13:25

answered Nov 11, 2013 at 13:02

Tim Holum

7571 gold badge12 silver badges24 bronze badges

1 Comment

Tim Holum Over a year ago

Sorry I was commenting from my phone

Collectives™ on Stack Overflow

Php session files permissions

3 Answers 3

Comments

2 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

2 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related