[Bug 316441] Re: PHP session garbage collection

Ondřej Surý ondrej at sury.org
Mon Oct 11 15:14:15 BST 2010


> Yet another reason to loose this cron job.

The reason why the Debian way of gc was introduced was security issue.

Phil, do you expect that standard installation of Debian PHP will work
out-of-the-box even on high load servers without any tweaks and
settings?

You are free to set the php in any way you want it. However suggesting
we drop the security on the floor because your server was experiencing
high load isn't really reasonable. I am sorry, but with PHP no size can
fit all, and the cron-job approach is most conservative security wise.

I don't mind changing the README or default comments in the php.ini, but
the default PHP installation should be most secure (even though it may
not be the fastest or most efficient).

-- 
PHP session garbage collection
https://bugs.launchpad.net/bugs/316441
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to php5 in ubuntu.



More information about the Ubuntu-server-bugs mailing list