sess cookie files Can I change?

[tommygunner]

I want to change session files so that they are in subdirectory in tmp or another location of choice. Right now they are under /tmp/ and I have it as 777 which is pretty insecure. How can I change the location for this?

[[Unknown]]

Having /tmp 777 isn't really that insecure.  Make sure it's stickied, though - it should be 1777.

You can make it a subdirectory by editing php.ini.  Note that if you make /tmp not writable, MySQL will start choking too.

-[Unknown]

[tommygunner]

Yes, I figured out that in php.ini you can put path. I created subdirectory and made tmp folder 755. It started giving me errors until I made tmp 777 again.

What is stickied 1777?

[[Unknown]]

That means that only the file's creator can modify/delete it.  You want this for /tmp.

Edit: actually, it may just be modify, but I think it's both.  Point is, it's what is needed for security.

-[Unknown]

[tommygunner]

That means that only the file's creator can modify/delete it.  You want this for /tmp.

Edit: actually, it may just be modify, but I think it's both.  Point is, it's what is needed for security.

-[Unknown]

thanks