[phpa] security: phpa files created world-readable

By default, phpa's cache is stored in /tmp, a generally-world-readable
location, using the server user's default umask, which is often 022.

Since these cache files can contain information related to a web
application (authentication, authorization, session information, etc.) or
personal information (I'm using phpa for squirrelmail, for example), this
seems to be something of a security or privacy risk.

Thanks,
  John



------------------------------------------------------------------------
  www.php-accelerator.co.uk           Home of the free PHP Accelerator

To post, send email to phpa@xxxxxxxxxxxxx
To unsubscribe, email phpa-request@xxxxxxxxxxxxx with subject unsubscribe


Other related posts: