add warning about having a world-readable sessions.save_path

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@40013 c90b9560-bf6c-de11-be94-00142212c4b1
This commit is contained in:
jim winstead 2001-01-23 02:03:35 +00:00
parent f53a59c0f0
commit d119a57899

View file

@ -184,6 +184,14 @@ To continue, <A HREF="nextpage.php?<?=SID?>">click here</A>
handler, this is the path where the files are created.
Defaults to <literal>/tmp</literal>.
</simpara>
<warning>
<para>
If you leave this set to a world-readable directory, such as
<filename>/tmp</filename> (the default), other users on the
server may be able to hijack sessions by getting the list of
files in that directory.
</para>
</warning>
</listitem>
<listitem>
<simpara>