Session Directory

[jolicatellas]

I use osCom 2.2ms2 and under Catalog I have two directories: log.php and session.php.

 

Not sure if they're meant to be there or not.

 

Under log directory it is empty.

 

And strangely under session directory I have 24 sess_(followed by numbers and letters) listed all on the same date. Not sure what these sessions means or if I should deleted them?

[Guest]

Jodi,

 

 

I don't think either of those files is standard with a MS2.2 installation. However, they may have been added as part of a contribution installation. Usually sessions are stored in the database, but under certain conditions they could be stored in a directory.

 

 

Could you post the session.php file ? It is unusual and I would like to see what the code looks like.

 

 

 

Chris

[satish]

Downlaod a fresh osc2.3.1 and check what all files are there by default.

 

Both the files you stated are not in fresh oscommerce install.

 

Satish

[jolicatellas]

I checked against early and later version and neither of these files are there. Looks like they're good for deleting.

 

Here is a snippet of what the session directory contains (24 of them all with the same date):

 

Name	Size	Permissions	User	Group	Last Modified	Action 

 sess_0e057fe3638c443b4aac9c9d974c6441
342 bytes	-rw-------		pemcln	06/13/2011 17:10:00	    

 sess_0f61dd6017fa2afb9375272fea3f27ae
342 bytes	-rw-------		pemcln	06/13/2011 17:10:38	    

 sess_15dc04ff52af0a0b295392406b8aa2ab
174 bytes	-rw-------		pemcln	06/13/2011 17:38:44	    

[jolicatellas]

BTW I haven't added any add-ons or contributions.

[jolicatellas]

Manged to open one of the session files. This is the coding.

 

cart|O:12:"shoppingCart":4:{s:8:"contents";a:0:{}s:5:"total";i:0;s:6:"weight";i:0;s:12:"content_type";b:0;}language|s:7:"english";languages_id|s:1:"1";currency|s:3:"AUD";navigation|O:17:"navigationHistory":2:{s:4:"path";a:1:{i:0;a:4:{s:4:"page";s:9:"index.php";s:4:"mode";s:6:"NONSSL";s:3:"get";a:0:{}s:4:"post";a:0:{}}}s:8:"snapshot";a:0:{}}

 

Might this explain why I suddenly stopped receiving email notifications from the website? Even though the session files are 2 months old and the notifications only just stopped.

[satish]

Check your configure.php file.

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

 

I recommend that this should be left empty for session to be in DB tables.

 

In your case it appears that its set to some file path.

 

Satish

[jolicatellas]

Interestingly both my configure.php files say the above. I have been checking much of my coding and I cannot find any anomalies that would explain any of this.

[satish]

might be someone has placed some code.

Do the following:

Download you code then search for includes to these too files or write to these two files.

Also check what permissionsa re for these two files.If 777 then someone is trying to get something extracted from your site.

 

Might be you gave work to some developer and as an analysis He might have wrote some code that was to use these files.

 

Satish