From 6e8a202f7044cd369300982c33e7fe5160f21959 Mon Sep 17 00:00:00 2001 From: Andrey Andreev Date: Tue, 3 Feb 2015 10:53:05 +0200 Subject: [ci skip] Suggest 0700 instead of 0600 for session save_path dir Related #3545 --- user_guide_src/source/libraries/sessions.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'user_guide_src/source/libraries') diff --git a/user_guide_src/source/libraries/sessions.rst b/user_guide_src/source/libraries/sessions.rst index bf0d7a49c..ac0ca27f5 100644 --- a/user_guide_src/source/libraries/sessions.rst +++ b/user_guide_src/source/libraries/sessions.rst @@ -493,7 +493,7 @@ also steal any of the current sessions (also known as "session fixation" attack). On UNIX-like operating systems, this is usually achieved by setting the -0600 mode permissions on that directory via the `chmod` command, which +0700 mode permissions on that directory via the `chmod` command, which allows only the directory's owner to perform read and write operations on it. But be careful because the system user *running* the script is usually not your own, but something like 'www-data' instead, so only setting those @@ -503,7 +503,7 @@ Instead, you should do something like this, depending on your environment :: mkdir //sessions/ - chmod 0600 //sessions/ + chmod 0700 //sessions/ chown www-data //sessions/ Bonus Tip -- cgit v1.2.3-24-g4f1b