Our features site is undergoing a refresh! Be sure to explore the revamped site and discover our latest product roadmap launching here on Monday, March 18th.
This object is in archive! 

Separate sessions directory (not /tmp) WITHOUT directory listing, on file systems with large number of inodes

alex shared this idea 11 years ago
Open Discussion

There are 2 problems with php sessions1. There should be a different directory (session.save_path) for sessions which would DISALLOW directory listing. PHP session ids is not a good idea to show to all users.

2. /tmp (or otherwise) file system needs to have a much larger inode table due to session files usually being small and plentiful. If inodes run out (which it does on busy servers), websites stop working properly.

Replies (1)

photo
1

It is indeed strange that the tmp is only 512mb large!!!

I was trying to do a repair table and the tmp run always full, it was not possible to repair.

With the /scripts/securetmp i finally found a way to change the /usr/tmpDSK file, I changed the my $tmpdsksize size to 2Gb

When I run the script it indeed changes my tmp , but the next reboot reverts my tmp to 512mb !!!


It should be custumisable in the tweaks menu

Leave a Comment
 
Attach a file