title: Shared server php sessions in /tmp
body: <p>I have a client that is own a shared host the uses php sessions. The session save path is /tmp by default. They are having random logouts.</p>
  
  <p>Could this be caused by any/all of these?</p>
  
  <ol>
  <li>Garbage collection by other user on the server?</li>
  <li>Someone clearing out /tmp files (User or cron). This seems unlikely as the host I am using is pretty well known</li>
  </ol>
  
  <p>I can change the session save path to a folder under their control. Do you think this would be the best solution? I know shared hosts sessions are insecure as anyone can read them (and I think even write to them via nobody/apache user)</p>