[root@macscr public_html]# cat /etc/php.ini |grep session session.save_handler = files ; variable in order to use PHP's session functions. ; session.save_path = "N;/path" ; where N is an integer. Instead of storing all the session files in ; store the session data in those directories. This is useful if you ; a more efficient layout for servers that handle lots of sessions. ; You can use the script in the ext/session dir for that purpose. ; use subdirectories for session storage ; session.save_path = "N;MODE;/path" session.save_path = /var/lib/php/session session.use_cookies = 1 ; attacks which involve passing session ids in URLs; defaults to 0. ; session.use_only_cookies = 1 ; Name of the session (used as cookie name). session.name = PHPSESSID ; Initialize session on request startup. session.auto_start = 0 session.cookie_lifetime = 0 session.cookie_path = / session.cookie_domain = session.serialize_handler = php ; on every session initialization. session.gc_probability = 1 session.gc_divisor = 1000 session.gc_maxlifetime = 1440 ; NOTE: If you are using the subdirectory option for storing session files ; (see session.save_path above), then garbage collection does *not* ; setting session.gc_maxlifetime to 1440 (1440 seconds = 24 minutes): ; cd /path/to/sessions; find -cmin +24 | xargs rm ; to initialize a session variable in the global scope, albeit register_globals session.bug_compat_42 = 0 session.bug_compat_warn = 1 ; HTTP_REFERER has to contain this substring for the session to be session.referer_check = session.entropy_length = 0 ; Specified here to create the session id. session.entropy_file = ;session.entropy_length = 16 ;session.entropy_file = /dev/urandom session.cache_limiter = nocache session.cache_expire = 180 ; - User may send URL contains active session ID ; - URL that contains active session ID may be stored ; - User may access your site with the same session ID session.use_trans_sid = 0 session.hash_function = 0 session.hash_bits_per_character = 5 [root@macscr public_html]#