individual session and tmp folders for vhost

[Jochen Kaechelin <gissmoh@gmx.de>]

I would create a own session_safe_path and upload_tmp_dir
for every virtualhost:

/var/www
	domain1.xx
		_sess
		_tmp

	domain2.xx
		_sess
		_tmp

and use the open_basedir restrictions.
The _sess folders would be cleaned with a cron-job.

What ist the recommended way for chmoding/chowning these two 
folders?

What about this:

chown www-data:www-data 	_sess
chmod 0700 			_sess

chown www-data:domainuser	_tmp
chmod 0770			_tmp
(so the user can clean it with a ftp-client)

Any suggestions? What about security?

I run apache2.0.5x, libapache2_mod_php4.


-- 
Jochen Kaechelin || www.gissmoh.de