blob: 49969f2066113cd7722e16c46e6c885dccd1318c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
<?php
/**
* Piwik - Open source web analytics
*
* @link http://piwik.org
* @license http://www.gnu.org/licenses/gpl-3.0.html Gpl v3 or later
* @version $Id$
*
* @category Piwik
* @package Piwik
*/
/**
* Session initialization.
*
* @package Piwik
*/
class Piwik_Session extends Zend_Session
{
public static function start($options = false)
{
// don't use the default: PHPSESSID
$sessionName = defined('PIWIK_SESSION_NAME') ? PIWIK_SESSION_NAME : 'PIWIK_SESSID';
@ini_set('session.name', $sessionName);
// we consider this a misconfiguration (i.e., Piwik doesn't implement user-defined session handler functions)
if(ini_get('session.save_handler') == 'user')
{
@ini_set('session.save_handler', 'files');
@ini_set('session.save_path', '');
}
// for "files", we want a writeable folder;
// for shared hosting, we assume the web server has been securely configured to prevent local session file hijacking
if(ini_get('session.save_handler') == 'files')
{
$sessionPath = ini_get('session.save_path');
if(preg_match('/^[0-9]+;(.*)/', $sessionPath, $matches))
{
$sessionPath = $matches[1];
}
if(ini_get('safe_mode') || ini_get('open_basedir') || empty($sessionPath) || !@is_readable($sessionPath) || !@is_writable($sessionPath))
{
$sessionPath = PIWIK_USER_PATH . '/tmp/sessions';
$ok = true;
if(!is_dir($sessionPath))
{
@mkdir($sessionPath, 0755, true);
if(!is_dir($sessionPath))
{
// Unable to mkdir $sessionPath
$ok = false;
}
}
else if(!@is_writable($sessionPath))
{
// $sessionPath is not writable
$ok = false;
}
if($ok)
{
@ini_set('session.save_path', $sessionPath);
}
// else rely on default setting (assuming it is configured to a writeable folder)
}
}
Zend_Session::start();
}
}
|
