nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bug #1538132, remove the setting of session.save_handler to 'files'

Browse Source
This commit is contained in:
Marc Delisle
2007-01-05 11:57:04 +00:00
parent 7e7b39aa83
commit 9ae2b21e22
2 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ChangeLog
View File

@@ -5,6 +5,10 @@ phpMyAdmin - ChangeLog
$Id$ $Id$
$Source$ $Source$
2007-01-05 Marc Delisle <lem9@users.sourceforge.net>
* libraries/session.inc.php: bug #1538132, remove the setting of
session.save_handler to 'files'
2007-01-02 Marc Delisle <lem9@users.sourceforge.net> 2007-01-02 Marc Delisle <lem9@users.sourceforge.net>
* pdf_pages.php: undefined $pdf_page_number when no auto layout * pdf_pages.php: undefined $pdf_page_number when no auto layout
* server_privileges.php: bug #1614087, deleting a user having a * server_privileges.php: bug #1614087, deleting a user having a

7
libraries/session.inc.php
View File

@@ -74,9 +74,8 @@ if (version_compare(PHP_VERSION, '5.0.0', 'ge')
// on some servers (for example, sourceforge.net), we get a permission error // on some servers (for example, sourceforge.net), we get a permission error
// on the session data directory, so I add some "@" // on the session data directory, so I add some "@"
// [2006-01-25] Nicola Asuni - www.tecnick.com: maybe the PHP directive // See bug #1538132. This would block normal behavior on a cluster
// session.save_handler is set to another value like "user" //ini_set('session.save_handler', 'files');
ini_set('session.save_handler', 'files');
@session_name('phpMyAdmin'); @session_name('phpMyAdmin');
@session_start(); @session_start();
@@ -90,7 +89,7 @@ if (!isset($_SESSION[' PMA_token '])) {
} }
/** /**
* trys to secure session from hijacking and fixation * tries to secure session from hijacking and fixation
* should be called before login and after successfull login * should be called before login and after successfull login
* (only required if sensitive information stored in session) * (only required if sensitive information stored in session)
* *