5
votes
Accepted
PHP on Windows - ps_files_cleanup_dir error
Session temporary files are created in this directory as per the ‘session.save_path’ property in php.ini. Without the permissions to delete files in this directory PHP is unable to remove these files ...
- 166
5
votes
Accepted
rm -rf cannot delete session files
The problem here is that path name expansion occurs BEFORE the sudo. The path name expansion for ./* doesn't have permission to see the directory contents. Therefore, it would not get expanded to rm -...
- 49.8k
5
votes
UDP Sessions and Ephemeral Port Selection
According to https://www.cymru.com/jtk/misc/ephemeralports.html the selection strategy varies between random and sequential depending on OS. Based on my observations, it the source port for UDP is ...
5
votes
PHP 7.2 Failed to read session data: memcache
I had the same issue with PHP 7.1 and memcached, but i think this also will solve your problem.
The issue is with the read function which return false or null if the session doesn't exists. You need ...
4
votes
Accepted
My PHP session variables are destroyed when form doesn't submit for 20+ mins
You might want to check your (for example) /etc/php/7.0/apache2/php.ini for timeout settings. I found session.gc_maxlifetime = 1440 in my default setup, which is very close to your 20 minutes.
Path ...
- 611
3
votes
nginx - ssl session resumption
I think you need to add this configuration if you still dont have in you current configuration,
ssl_session_cache shared:SSL:50m;
ssl_session_timeout 5m;
And are you sure that two servers have the ...
- 593
3
votes
Changing session.save_path in php.ini not working
create phpinfo() file in dir with this php file.
open it via browser, and find list of applied ini-files.
check all of these files to contain session.save_path override
- 377
3
votes
Accepted
What is a "session" on an iSeries / AS400?
I looked at the linked question, and it appears that you need just a little basic assistance.
When a user opens his 5250 terminal emulator (like iACS 5250 Emulator), and then signs on to IBM i, that ...
- 181
3
votes
HTTPS session resumption sometimes partially working
The best way I found so far to diagnose ssl session resumption is to look at the sent byte count
First, enable mod_status and set ExtendedStatus to On. Make sure this status page is non-public ...
- 2,766
2
votes
session.save permission erorr
The error message says you have exceeded your disk quota. Free up some space.
Warning: Unknown: write failed: Disk quota exceeded
- 396
2
votes
Is Tomcat Shared Session / Cluster between two machine possible?
I am working on setting up the same thing, the below link from Apache gives on overview of how to achieve this :
http://tomcat.apache.org/tomcat-7.0-doc/cluster-howto.html
There are basically two ...
- 151
2
votes
PHP session directory full?
sudo find /var/lib/php/session -type f -delete will work better than sudo rm /var/lib/php/session/* because expansion of * is hardly possible for big lists of files.
- 7,989
2
votes
Centos/Fedora cipher suites
I think you are getting confused with X.509 certificates and TLS. TLS is just one (but the largest) application of certificates.
The session key algorithm depends on the application. If, for ...
- 4,789
2
votes
Kill defunct xrdp session --- xrdp users cannot log on
xrdp is making a log diary about the session inside .xrdp* files stored into the user's home directory. It might happen some .xrdp* session files to be stored into /tmp/ or /tmp/.xrdp/. xrdp service ...
- 21
2
votes
Accepted
Open a non-console session when Windows boots
mstsc.exe can run without GUI, which is usually useless but very helpfull in this case.
You can create a scheduled task fired when the computer starts.
This task will launch as many remote desktop ...
- 664
2
votes
What happens to DHCP sessions on client devices when the DHCP server breaks down and comes online after an interval?
Normally the DHCP server would have saved its lease data to persistent storage, so after coming up again it would indeed know about the state of your client device. If however the breakdown was such ...
- 4,179
2
votes
Accepted
Disable Fast User Switching
What you are asking to do is to disable “Fast User Switching.”
It can be done with GPO, or registry tweaks.
Set the “Hide entry points for fast user switching” GPO in Computer Configuration\...
- 3,860
2
votes
How do you set the session key size in OpenSSH?
A lot of security improvements were made in the SSH 2 protocol compared to protocol version 1 and I imagine removing that option was one of those.
As far as I can divine the session key size is ...
- 80.3k
2
votes
How to Handle Long TCP Sessions deployment in ZDD?
Rolling upgrades. Deploy a new version of the thing. Drain stop the old ones.
Implementation may involve graceful stop scripts, or setting time outs longer than your longest session. On Kubernetes, ...
- 33.3k
2
votes
Issue with HAProxy and SSL/TLS handshake by webserver for different subdomains in same browser session
This can happen if multiple internal servers have a multi-domain certificate (or wildcard certificate) where the different domains covered by the certificate are handled by different internal servers.
...
- 13.7k
2
votes
Accepted
Codeignitor - under login / session load MySQL CPU spike and Fatal MySQL Deadlock
You need some kind of index on id.
If id is unique, it should probably be the PRIMARY KEY.
- 2,558
2
votes
Remote Desktop - Does leaving a session open slow down the server?
Will it slow the server down? Possibly. A disconnected session still consumes resources.
The larger implication is the potential security ramifications of leaving an unattended session running on the ...
- 111k
1
vote
Two websites in different servers has same cookie_domain but is not sharing session
You need to actually share the session data between the web servers. The cookie is merely an index to the session storage.
How exactly you can make the web servers share session data depends entirely ...
- 37.6k
1
vote
Empty LAMP Sessions
This should be a comment - but its a bit long.
You've not told us why this is unexpected nor provided any context.
Have you tried to correlate the session creation with your access log?
Do you ...
- 22.4k
1
vote
Open a non-console session when Windows boots
To achieve exactly what you've asked you'll need at least one Linux with GUI or Windows Server to put a script on.
In linux/bash I'd script a ping monitoring script that runs a command after what ...
- 1,709
1
vote
Tracking logon sessions in Office365 logs
Taken from: Use Office 365 tools for security investigations in Exchange Online and SharePoint Online
To examine the devices and applications from which a specific user connected to a mailbox in ...
- 3,879
1
vote
Accepted
Apache Allow Only Authorized Users to Access File
You can do that with mod_write in this way:
RewriteEngine On
RewriteCond %{HTTP_REFERER} !pippo\.com [NC]
RewriteCond %{REQUEST_URI} ^/foo
RewriteRule .* - [F]
Try to fake referer:
curl --referer ...
- 5,411
1
vote
Apache Allow Only Authorized Users to Access File
I ended up using the 'Referer' environment variable to check if the request was coming from the correct site. So for the example I gave above the config would look like:
ServerName blah.baz.com
...
- 171
1
vote
rm -rf cannot delete session files
As @Esa Jokinen said often you can't delete session files even with command like sudo rm -rf /var/lib/php/sessions/* because a path name expansion occurs BEFORE the sudo.
You can try another command ...
- 111
1
vote
rm -rf cannot delete session files
You have not indicated which user you are running as. However, the $ prompt indicates that you are running as a standard user, which is most likely not www-data.
So, the issue is that file system ...
- 37.6k
Only top scored, non community-wiki answers of a minimum length are eligible