security question, save_path, upload_tmp_dir

Discussion in 'Installation/Configuration' started by brody182, Jul 26, 2017.

  1. brody182

    brody182 Member

    save_path is disabled, or is set to a common world-writable directory. This typically allows other users on this server to access session files. You should set save_path to a non-world-readable directory

    upload_tmp_dir is disabled, or is set to a common world-writable directory. This typically allows other users on this server to access temporary copies of files uploaded via your PHP scripts. You should set upload_tmp_dir to a non-world-readable directory

    are these correct settings in ispconfig 3.1.6?
     

Share This Page