My hosting sent me email saying
I have set the session.save_path = /home/users/web/b1475/moo.youraccount/cgi-bin/tmp for your account
then i found my website is giving me this error
Warning: session_start() [function.session-start]: open(/home/users/web/b1475/moo.youraccount/cgi-bin/tmp/sess_718a8cd346244df6916f016eb315f19f, O_RDWR) failed: No such file or directory (2) in /hermes/waloraweb006/b1475/moo.youraccount/db.php on line 4
and the db.php code is (it is database connection file)
<?PHP
$conn = mysql_connect($host, $user, $pass);
if ($conn) mysql_select_db($db, $conn);
session_start();
?>
what can i do then to fix this error :(
Change hosting companies.
ReplyDeleteThere is no way the session path should ever be within the cgi directory. Having it anywhere within the document root is very dangerous.
It's possible that devDrew is right and the path is bad - in which case the session won't work at all. It's also possible that you're using an old/expired session id - does it recurr when you try to establish a new session?
While you can avoid much of the nastiness from this (both fixing a permissions / directory error and avoiding a potential code injection backdoor) by using a database session handler if your provider is making such basic mistakes here then they'll be making them elsewhere too.